Hi
We would like to connect with you, our customer, and make it easier for you to communicate and do business with us on the platforms you are present on.
If you have any Telkom line related problems or Telkom account related queries, please feel free to post them here or PM us.
We will still keep an eye on other threads to see where we can assist.
We endeavour to make your customer experience a memorable one.
Queries will be attended to from Monday to Friday between 08:00 and 17:00
Remember, you can also reach us on:
Twitter: @TelkomZA
Facebook: facebook.com/TelkomZA
My Hello Peter Post :
For three days (now 4) , and after several hours on the phone to the call centre, and speaking to many many different people, I have not succeeded in explaining my problem let alone getting advice or action to fix it.
Any IP address that is assigned by TELKOM (my ISP) to either of my two routers on ADSL lines, are IMMEDIATELY attacked with Denial of Service Attacks from all over the world.
The attacks are causing my routers to hang and require reboot every hour. (and as an aside, Telkom Call Centre suggests that is a lovely solution, no problem, just restart the routers when they hang.)
Can I please speak to someone who knows what this means :
kernel: Intrusion -> IN=ppp_0_8_35_1 OUT= MAC= SRC=212.38.181.116 DST=105.226.10.250 LEN=40 TOS=0x10 PREC=0x00 TTL=246 ID=23235 PROTO=TCP SPT=51655 DPT=5905 WINDOW=1024 RES=0x00 SYN URGP=0
There are hundreds of these .... all from different SRC IP addresses. Even if my IP address changes due to reboot of router, Attacks just continue on new IP Address.
PLEASE HELP ! Who can I talk to to convince Telkom that THEY are under attack, and that the problem is not my Laptop ? (Not that I don't have seventy other computers on the network) And that for me to try connecting with another computer is not the answer.
Obviously I am trying to determine if any of this is originating from within the network, but I can not find anything.
I am packet capturing as we speak.
More Logs : (D-Link)
Dec 22 10:01:00 user alert kernel: Intrusion -> IN=ppp_0_8_35_1 OUT= MAC= SRC=122.225.109.103 DST=(my dynamically assigned IP)
LEN=40 TOS=0x10 PREC=0x00 TTL=96 ID=256 PROTO=TCP SPT=6000 DPT=22 WINDOW=16384 RES=0x00 SYN URGP=0
Dec 22 10:01:20 user alert kernel: Intrusion -> IN=ppp_0_8_35_1 OUT= MAC= SRC=60.173.10.74 DST=(my dynamically assigned IP)
LEN=40 TOS=0x10 PREC=0x00 TTL=107 ID=256 PROTO=TCP SPT=23243 DPT=10022 WINDOW=16384 RES=0x00 SYN URGP=0
Dec 22 10:06:26 user alert kernel: Intrusion -> IN=ppp_0_8_35_1 OUT= MAC= SRC=41.220.77.56 DST=(my dynamically assigned IP)
LEN=52 TOS=0x10 PREC=0x00 TTL=115 ID=9526 PROTO=TCP SPT=60689 DPT=40381 WINDOW=8192 RES=0x00 SYN URGP=0
Other Router : (Netgear)
[DoS Attack: ACK Scan] from source: 179.60.192.97, port 443, Monday, December 22,2014 10:24:22
[DoS Attack: ACK Scan] from source: 77.234.41.63, port 80, Monday, December 22,2014 10:23:43
[DoS Attack: ACK Scan] from source: 179.60.192.17, port 443, Monday, December 22,2014 10:16:36
Any comments on this please ?
I will be loading a different ISP on the routers soon, to see if the attacks stop.
Problem remains , no one at TELKOM even understands my question.