Topic: Modem Dials Continuosly

[wykyd]

I have had SME 6b up and running for ages and it has ran fine on Dial On Demand with long connection times ever since it was set up.

Now I get a continous dialing. It keeps a coninous connection even if no other computers are on in the network.

There is no time server configured although there was and since been disabled.
There are no other computers on in the network when it dials at like 4 21 AM

here is a sample from the logs


     IP transmitted 2942363 bytes and received 15657632 bytes.
Sun Sep 14 20:19:37 2003 EST: Calling site 192.168.34.29.
Sun Sep 14 20:20:35 2003 EST: Calling site 192.168.34.29.
Sun Sep 14 20:21:32 2003 EST: Calling site 192.168.34.29.
Sun Sep 14 20:22:30 2003 EST: Calling site 192.168.34.29.
Sun Sep 14 20:23:37 2003 EST: Calling site 192.168.34.29.
Sun Sep 14 20:25:05 2003 EST: Calling site 192.168.34.29.
Sun Sep 14 20:27:12 2003 EST: Calling site 192.168.34.29.
Sun Sep 14 20:30:39 2003 EST: Calling site 192.168.34.29.
Sun Sep 14 20:36:46 2003 EST: Calling site 192.168.34.29.
Sun Sep 14 21:08:47 2003 EST: Calling site 192.168.34.29.
Sun Sep 14 21:29:16 2003 EST: Calling site 0.0.0.0.
Sun Sep 14 21:29:49 2003 EST: Connected to site 0.0.0.0.
Sun Sep 14 21:31:21 2003 EST: Disconnected. Call duration 92 seconds.
      IP transmitted 4811 bytes and received 0 bytes.
Sun Sep 14 21:31:32 2003 EST: Calling site 192.168.34.1.
Sun Sep 14 21:31:59 2003 EST: Connected to site 192.168.34.1.
Sun Sep 14 23:23:08 2003 EST: Disconnected. Call duration 6669 seconds.
      IP transmitted 749557 bytes and received 5111825 bytes.
Sun Sep 14 23:23:10 2003 EST: Calling site 192.168.34.1.
Sun Sep 14 23:23:46 2003 EST: Connected to site 192.168.34.1.
Mon Sep 15 04:32:19 2003 EST: Disconnected. Call duration 18513 seconds.
      IP transmitted 38245 bytes and received 43542 bytes.
Mon Sep 15 04:32:21 2003 EST: Calling site 203.134.64.173.
Mon Sep 15 04:32:51 2003 EST: Connected to site 203.134.64.173.
Mon Sep 15 04:54:00 2003 EST: Disconnected. Call duration 1269 seconds.
      IP transmitted 3469 bytes and received 7010 bytes.
Mon Sep 15 04:54:02 2003 EST: Calling site 192.168.34.25.
Mon Sep 15 04:54:30 2003 EST: Connected to site 192.168.34.25.
Mon Sep 15 09:54:22 2003 EST: Disconnected. Call duration 17992 seconds.
      IP transmitted 297773 bytes and received 138077 bytes.
Mon Sep 15 09:54:24 2003 EST: Calling site 192.168.34.29.
Mon Sep 15 09:54:59 2003 EST: Connected to site 192.168.34.29.
Mon Sep 15 14:55:34 2003 EST: Disconnected. Call duration 18035 seconds.
      IP transmitted 554068 bytes and received 143180 bytes.
Mon Sep 15 14:55:36 2003 EST: Calling site 192.168.34.13.
Mon Sep 15 14:56:03 2003 EST: Connected to site 192.168.34.13.


 my network only uses 192.168.0. 1 to 30 1 being the server.

Is this someone hacking in or using my server for something and either way how do I stop it?

thanx

[wykyd]

correct me if I am wrong but 192.168 is reserved for internal network address's
As there are no machines on inside the network and this is reaching outside my network for a machine with a network IP, I find this rather frustrating.

I can ping the machine it is reaching for. But how can that machine have an IP of this and be found on the internet?

How can I track down what is requesting that IP?

I have gone through the logs and found nothing so far.

Please Help.

[Jeff C]

Check with your isp.

The 192.168 net is often used by ISPs for their dialup clients.  It prevents those clients from offering services to the world.

-jeff

[wykyd]

oh ok, So it is quite possible it is just searching for the IP of the dialup client.

So is there a Contrib that can monitor services so I can see exactly what is dialing constantly.

I have searched but not as yet found anything.

Thanx for the reply.