I would like to report a technical issue with my Internet connection.. I ahve noticed that my Internet connection is very slow (high Latency) and my TV channels are frequently buffering. On 20th Janurary my Gigabox charhed and restarted twice.
I connected to my router on 192.168.0.1 and found the following:
- The connection to my router on 192.168.0.1 is very slow.
- The network status shows a lot of IP FLOOD notifications>
IP Flood - SRC=188.8.131.52 MAC=00:17:10:8E:19:0A;CM-MAC=34:2c:c4:60:2e:18;CMTS-MAC=00:17:10:8e:19:0a;CM-QOS=1.1;CM-VER=3.0;
% This is the RIPE Database query service.
% The objects are in RPSL format.
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: this output has been filtered.
% To receive output for a database update, use the “-B” flag.
% Information related to ‘184.108.40.206 - 220.127.116.11’
% Abuse contact for ‘18.104.22.168 - 22.214.171.124’ is ‘email@example.com’
inetnum: 126.96.36.199 - 188.8.131.52
status: ASSIGNED PI
org-name: FOP PROVORNY O.L.
address: Velika Morska str. 23, of. 28
phone: +380 44 593-74-78
phone: +380 512 76-68-78
source: RIPE # Filtered
person: Alex Provorny
phone: +380 67 132-90-09
% Information related to ‘184.108.40.206/23AS41018’
descr: OMNILANCE LTD
The IP address has been reported 2 times in January for accessingn on-authorised ports (https://www.abuseipdb.com/check/220.127.116.11). The host is an Ubuntu server with SSH and Web services open.The host is misconfigured - http://18.104.22.168/And not fully patched - runs OpenSSH 7.6p1 It seems to be a compromised machine.
Can you please examine my connection and try to find a remedy.