NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
DOS attack from Germany now?
This has been showing in my logs recently. [DoS Attack: SYN/ACK Scan] from source: 148.251.48.231, port 50002, Monday, November 25, 2019 09:42:27 https://www.ipinfolookup.com/148.251.48.231 ...
FURRYe38 wrote:The router is doing it's job by blocking that and reporting it to you. If you think these are becoming more and more prominent, contact your ISP and have them change your WAN IP address.
Wow so I come back home after work today and a buch of these dos attack logs showed up around noon today even going to almost 2pm. Same IP address from Germany too. Heck my modem apparently went done a few times today as well I checked my modem logs and loads of uncorrectables and event log had a bunch of errors as well for my SB6190. Apparnelty according to down detector a bucnh of the US today had issues with Comcast internet.
So yeah maybe it is time to change WAN, unless I could block offending IP's manually. Anyway I could do that?
The firewall in the RBR is already blocking. It's just reporting what it's seeing. I would make contact with your ISP and let them know whats happening and have them change your WAN IP address there giving you. Usually a power OFF of the ISP modem for 1 minute will be needed. Also something to do, power OFF The ISP modem over night then back on or leave it off if nobody is home for a extended period of time. This can trigger a new IP address from the ISP sometimes.
So wait does it change everytime I power cycle. I had to powercycle the other day due to Comcast issues. I usually leave the modem off for a minute before plugging it back in. Does that do it too?
Only if you power cycle the modem which may trigger a new IP address assignment from the ISP. Leaving it OFF or long periods of time may do this as well.