Meu roteador ADSL (um Comtrend AR-5381u de 10 anos de idade) continua se desconectando da Internet a cada poucos minutos. Tem sido assim por 3-4 dias; O estranho é que isso só acontece durante a noite.
Eu tentei reiniciar o roteador a partir do console de administração de software (não ajuda), e desligá-lo e ligá-lo novamente fisicamente (nos dias anteriores, ele resolveu o problema ... hoje não aconteceu).
Tenho WiFi ativado (filtragem WPA2-PSK + AES e MAC). Não tenho certeza se isso é seguro o suficiente, mas de qualquer maneira eu estou verificando os "dispositivos autenticados WiFi" e o único mostrado é o meu próprio telefone, por isso não é um vizinho entediado bagunçando meu WiFi.
Além disso, não estou executando nenhum software P2P, nem fazendo nada que possa quebrar a Internet . Apenas algumas guias abertas no Google Chrome e alguns aplicativos em segundo plano no telefone. Outras vezes, estou apenas assistindo Netflix ou Youtube na minha TV, sem computador.
O que eu poderia fazer (se alguma coisa) para resolver ou pelo menos diagnosticar o problema?
Eu nem sei se é o meu roteador, ou o ISP, ou alguém que faz minha conexão (DDoS? Não é como se eu fosse a Microsoft, é apenas a minha casa ...).
Aqui está o log do sistema desde a última reinicialização (física). Existem muitas "intrusões no kernel", mas pelo que li, eu não deveria me preocupar com elas, elas são apenas tentativas de acessar meu roteador pela Internet (ou não são eles?).
Jan 1 00:00:08 syslog emerg BCM96345 started: BusyBox v1.00 (2011.10.28-05:10+0000)
Jan 1 00:00:24 user crit kernel: Line 0: xDSL G.994 training
Jan 1 00:00:24 user crit kernel: eth0 Link UP 100 mbps full duplex
Jan 1 00:00:37 user crit kernel: Line 0: ADSL G.992 started
Jan 1 00:00:41 user crit kernel: Line 0: ADSL G.992 channel analysis
Jan 1 00:00:45 user crit kernel: Line 0: ADSL G.992 message exchange
Jan 1 00:00:46 user crit kernel: Line 0: ADSL link down
Jan 1 00:00:47 user crit kernel: Line 0: xDSL G.994 training
Jan 1 00:01:00 user crit kernel: Line 0: ADSL G.992 started
Jan 1 00:01:04 user crit kernel: Line 0: ADSL G.992 channel analysis
Jan 1 00:01:08 user crit kernel: Line 0: ADSL G.992 message exchange
Jan 1 00:01:10 user crit kernel: Line 0: ADSL link up, Bearer 0, us=842, ds=16590
Jan 1 00:01:34 daemon crit syslog: PPP server detected.
Jan 1 00:01:34 daemon crit syslog: PPP session established.
Jan 1 00:01:40 daemon crit syslog: PPP LCP UP.
Jan 1 00:03:22 daemon crit syslog: PPP server detected.
Jan 1 00:03:23 daemon crit syslog: PPP session established.
Jan 1 00:03:26 daemon crit syslog: PPP LCP UP.
Jan 1 00:03:26 daemon crit syslog: Received valid IP address from server. Connection UP.
Apr 7 20:30:00 user alert kernel: Intrusion -> IN=ppp0 OUT= MAC= SRC=77.72.82.94 DST=95.16.160.53 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=20107 PROTO=TCP SPT=41720 DPT=8859 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
Apr 7 20:30:00 user alert kernel: Intrusion -> IN=ppp0 OUT= MAC= SRC=46.161.55.108 DST=95.16.160.53 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=19005 PROTO=TCP SPT=43447 DPT=2443 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
Apr 7 20:30:01 user alert kernel: Intrusion -> IN=ppp0 OUT= MAC= SRC=5.188.11.37 DST=95.16.160.53 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=38893 PROTO=TCP SPT=55797 DPT=5389 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
Apr 7 20:30:29 user alert kernel: Intrusion -> IN=ppp0 OUT= MAC= SRC=59.38.100.155 DST=95.16.160.53 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=61313 PROTO=TCP SPT=58121 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
Apr 7 20:30:45 user alert kernel: Intrusion -> IN=ppp0 OUT= MAC= SRC=223.100.148.74 DST=95.16.160.53 LEN=40 TOS=0x00 PREC=0x00 TTL=233 ID=33541 PROTO=TCP SPT=45265 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
Apr 7 20:40:01 user alert kernel: Intrusion -> IN=ppp0 OUT= MAC= SRC=50.2.190.138 DST=95.16.160.53 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=8313 DF PROTO=TCP SPT=18013 DPT=1250 WINDOW=512 RES=0x00 SYN URGP=0 MARK=0x8000000
Apr 7 20:50:07 user alert kernel: Intrusion -> IN=ppp0 OUT= MAC= SRC=185.216.140.16 DST=95.16.160.53 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=23593 DF PROTO=TCP SPT=32210 DPT=3308 WINDOW=512 RES=0x00 SYN URGP=0 MARK=0x8000000
Apr 7 21:00:03 user alert kernel: Intrusion -> IN=ppp0 OUT= MAC= SRC=211.152.60.146 DST=95.16.160.53 LEN=40 TOS=0x00 PREC=0x00 TTL=110 ID=256 PROTO=TCP SPT=49268 DPT=445 WINDOW=16384 RES=0x00 SYN URGP=0 MARK=0x8000000
Apr 7 21:02:01 user crit kernel: Line 0: ADSL link down
Apr 7 21:02:01 user crit kernel: Line 0: xDSL G.994 training
Apr 7 21:02:01 daemon crit syslog: Clear IP addresses. PPP connection DOWN.
Apr 7 21:02:01 daemon crit syslog: Clear IP addresses. Connection DOWN.
Apr 7 21:02:13 user crit kernel: Line 0: ADSL G.992 started
Apr 7 21:02:17 user crit kernel: Line 0: ADSL G.992 channel analysis
Apr 7 21:02:21 user crit kernel: Line 0: ADSL G.992 message exchange
Apr 7 21:02:22 user crit kernel: Line 0: ADSL link down
Apr 7 21:02:23 user crit kernel: Line 0: xDSL G.994 training
Apr 7 21:02:36 user crit kernel: Line 0: ADSL G.992 started
Apr 7 21:02:40 user crit kernel: Line 0: ADSL G.992 channel analysis
Apr 7 21:02:44 user crit kernel: Line 0: ADSL G.992 message exchange
Apr 7 21:02:45 user crit kernel: Line 0: ADSL link up, Bearer 0, us=888, ds=17075
Apr 7 21:03:12 daemon crit syslog: PPP server detected.
Apr 7 21:03:12 daemon crit syslog: PPP session established.
Apr 7 21:03:15 daemon crit syslog: PPP LCP UP.
Apr 7 21:03:17 daemon crit syslog: Received valid IP address from server. Connection UP.
Apr 7 21:03:28 user alert kernel: Intrusion -> IN=ppp0 OUT= MAC= SRC=185.216.140.16 DST=95.16.58.57 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=29519 DF PROTO=TCP SPT=17817 DPT=3729 WINDOW=512 RES=0x00 SYN URGP=0 MARK=0x8000000
Apr 7 21:04:07 user alert kernel: Intrusion -> IN=ppp0 OUT= MAC= SRC=5.188.11.37 DST=95.16.58.57 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=44709 PROTO=TCP SPT=55797 DPT=3382 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
Apr 7 21:04:21 user crit kernel: Line 0: ADSL link down
Apr 7 21:04:21 user crit kernel: Line 0: xDSL G.994 training
Apr 7 21:04:21 daemon crit syslog: Clear IP addresses. PPP connection DOWN.
Apr 7 21:04:21 daemon crit syslog: Clear IP addresses. Connection DOWN.
Apr 7 21:04:33 user crit kernel: Line 0: ADSL G.992 started
Apr 7 21:04:37 user crit kernel: Line 0: ADSL G.992 channel analysis
Apr 7 21:04:42 user crit kernel: Line 0: ADSL G.992 message exchange
Apr 7 21:04:43 user crit kernel: Line 0: ADSL link down
Apr 7 21:04:44 user crit kernel: Line 0: xDSL G.994 training
Apr 7 21:04:56 user crit kernel: Line 0: ADSL G.992 started
Apr 7 21:05:00 user crit kernel: Line 0: ADSL G.992 channel analysis
Apr 7 21:05:05 user crit kernel: Line 0: ADSL G.992 message exchange
Apr 7 21:05:06 user crit kernel: Line 0: ADSL link up, Bearer 0, us=888, ds=16380
Apr 7 21:05:30 daemon crit syslog: PPP server detected.
Apr 7 21:05:30 daemon crit syslog: PPP session established.
Apr 7 21:05:33 daemon crit syslog: PPP LCP UP.
Apr 7 21:05:34 daemon crit syslog: Received valid IP address from server. Connection UP.
Apr 7 21:06:08 user alert kernel: Intrusion -> IN=ppp0 OUT= MAC= SRC=109.248.9.18 DST=87.218.25.144 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=38071 PROTO=TCP SPT=50193 DPT=51391 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
Apr 7 21:06:36 user alert kernel: Intrusion -> IN=ppp0 OUT= MAC= SRC=185.216.140.16 DST=87.218.25.144 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=50787 DF PROTO=TCP SPT=50400 DPT=4509 WINDOW=512 RES=0x00 SYN URGP=0 MARK=0x8000000
Apr 7 21:06:45 user alert kernel: Intrusion -> IN=ppp0 OUT= MAC= SRC=139.162.115.7 DST=87.218.25.144 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=54321 PROTO=TCP SPT=58362 DPT=110 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Apr 7 21:06:58 user alert kernel: Intrusion -> IN=ppp0 OUT= MAC= SRC=185.130.212.2 DST=87.218.25.144 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=56833 DF PROTO=TCP SPT=2 DPT=8034 WINDOW=512 RES=0x00 SYN URGP=0 MARK=0x8000000
Apr 7 21:07:18 user crit kernel: Line 0: ADSL link down
Apr 7 21:07:18 user crit kernel: Line 0: xDSL G.994 training
Apr 7 21:07:19 daemon crit syslog: Clear IP addresses. PPP connection DOWN.
Apr 7 21:07:19 daemon crit syslog: Clear IP addresses. Connection DOWN.
Apr 7 21:07:30 user crit kernel: Line 0: ADSL G.992 started
Apr 7 21:07:34 user crit kernel: Line 0: ADSL G.992 channel analysis
Apr 7 21:07:39 user crit kernel: Line 0: ADSL G.992 message exchange
Apr 7 21:07:40 user crit kernel: Line 0: ADSL link down
Apr 7 21:07:41 user crit kernel: Line 0: xDSL G.994 training
Apr 7 21:07:53 user crit kernel: Line 0: ADSL G.992 started
Apr 7 21:07:57 user crit kernel: Line 0: ADSL G.992 channel analysis
Apr 7 21:08:02 user crit kernel: Line 0: ADSL G.992 message exchange
Apr 7 21:08:03 user crit kernel: Line 0: ADSL link up, Bearer 0, us=888, ds=16847
Apr 7 21:08:27 daemon crit syslog: PPP server detected.
Apr 7 21:08:27 daemon crit syslog: PPP session established.
Apr 7 21:08:30 daemon crit syslog: PPP LCP UP.
Apr 7 21:08:31 daemon crit syslog: Received valid IP address from server. Connection UP.
Apr 7 21:09:07 user alert kernel: Intrusion -> IN=ppp0 OUT= MAC= SRC=185.222.211.90 DST=87.218.24.53 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=3613 PROTO=TCP SPT=53518 DPT=33392 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
Apr 7 21:09:15 user alert kernel: Intrusion -> IN=ppp0 OUT= MAC= SRC=185.216.140.16 DST=87.218.24.53 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=11129 DF PROTO=TCP SPT=6335 DPT=4869 WINDOW=512 RES=0x00 SYN URGP=0 MARK=0x8000000
Apr 7 21:09:27 user alert kernel: Intrusion -> IN=ppp0 OUT= MAC= SRC=181.214.87.248 DST=87.218.24.53 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=33982 PROTO=TCP SPT=46326 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
Apr 7 21:09:39 user crit kernel: Line 0: ADSL link down
Apr 7 21:09:39 user crit kernel: Line 0: xDSL G.994 training
Apr 7 21:09:39 daemon crit syslog: Clear IP addresses. PPP connection DOWN.
Apr 7 21:09:39 daemon crit syslog: Clear IP addresses. Connection DOWN.
Apr 7 21:09:51 user crit kernel: Line 0: ADSL G.992 started
Apr 7 21:09:55 user crit kernel: Line 0: ADSL G.992 channel analysis
Apr 7 21:10:00 user crit kernel: Line 0: ADSL G.992 message exchange
Apr 7 21:10:01 user crit kernel: Line 0: ADSL link down
Apr 7 21:10:02 user crit kernel: Line 0: xDSL G.994 training
Apr 7 21:10:14 user crit kernel: Line 0: ADSL G.992 started
Apr 7 21:10:18 user crit kernel: Line 0: ADSL G.992 channel analysis
Apr 7 21:10:23 user crit kernel: Line 0: ADSL G.992 message exchange
Apr 7 21:10:24 user crit kernel: Line 0: ADSL link up, Bearer 0, us=888, ds=16953
Apr 7 21:10:48 daemon crit syslog: PPP server detected.
Apr 7 21:11:18 daemon crit syslog: PPP session established.
Apr 7 21:11:21 daemon crit syslog: PPP LCP UP.
Apr 7 21:11:22 daemon crit syslog: Received valid IP address from server. Connection UP.
Apr 7 21:11:51 user alert kernel: Intrusion -> IN=ppp0 OUT= MAC= SRC=77.72.82.103 DST=95.16.175.33 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=20005 PROTO=TCP SPT=54206 DPT=49 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
Apr 7 21:12:09 user alert kernel: Intrusion -> IN=ppp0 OUT= MAC= SRC=185.216.140.16 DST=95.16.175.33 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=37390 DF PROTO=TCP SPT=18182 DPT=4929 WINDOW=512 RES=0x00 SYN URGP=0 MARK=0x8000000
Apr 7 21:12:41 user alert kernel: Intrusion -> IN=ppp0 OUT= MAC= SRC=141.105.71.116 DST=95.16.175.33 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=55831 DF PROTO=TCP SPT=12970 DPT=8091 WINDOW=512 RES=0x00 SYN URGP=0 MARK=0x8000000
Apr 7 21:12:44 user alert kernel: Intrusion -> IN=ppp0 OUT= MAC= SRC=189.211.6.43 DST=95.16.175.33 LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=27155 DF PROTO=TCP SPT=61195 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000
Apr 7 21:12:52 user alert kernel: Intrusion -> IN=ppp0 OUT= MAC= SRC=5.101.2.205 DST=95.16.175.33 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=38539 PROTO=TCP SPT=47669 DPT=3426 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
Apr 7 21:13:37 user alert kernel: Intrusion -> IN=ppp0 OUT= MAC= SRC=5.188.11.43 DST=95.16.175.33 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=23727 PROTO=TCP SPT=47504 DPT=4049 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
Apr 7 21:13:42 user alert kernel: Intrusion -> IN=ppp0 OUT= MAC= SRC=77.72.82.88 DST=95.16.175.33 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=6796 PROTO=TCP SPT=59153 DPT=3222 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
Apr 7 21:13:44 user alert kernel: Intrusion -> IN=ppp0 OUT= MAC= SRC=93.174.93.218 DST=95.16.175.33 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=22819 PROTO=TCP SPT=46685 DPT=20183 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
Apr 7 21:13:59 user crit kernel: Line 0: ADSL link down
Apr 7 21:13:59 user crit kernel: Line 0: xDSL G.994 training
Apr 7 21:13:59 daemon crit syslog: Clear IP addresses. PPP connection DOWN.
Apr 7 21:13:59 daemon crit syslog: Clear IP addresses. Connection DOWN.
Apr 7 21:14:11 user crit kernel: Line 0: ADSL G.992 started
Parece que a linha desce logo depois de algumas "intrusões" ... todas as vezes. Então talvez seja algum tipo de ataque, ou pelo menos deixar o roteador sem resposta para que ele perca a conexão. Posso de alguma forma protegê-lo disso?
Atualizar :
Eu desconectei todos os telefones e conectei o roteador diretamente à tomada da parede. Ele melhorou um pouco, mas ainda continua desconectando.
As estatísticas do roteador mostram uma margem SNR de cerca de 9dB sempre que a conexão aumenta e, em seguida, cai. Às vezes fica com 8 ou 7, às vezes cai para 5, 4, 3dB ... O menor que eu já vi é 1,9. Às vezes, volta para 7, outras vezes a conexão é perdida. Tanto a jusante como a montante flutuam assim, mas a jusante é geralmente mais baixa. Minha conexão é "download de até 20Mbps e upload de até 1Mbps", então eu acho que o upstream não é "tão cheio".
Outra coisa que notei é que tenho um número insano de erros de HEC, principalmente a jusante. Como 5000 novos erros a cada 15 segundos. E é aí que a linha está funcionando e funcionando ...
Aqui está uma captura de tela da página de estatísticas agora. 1,8 milhões de erros HEC ... desde a última reinicialização há 8 horas:
