NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Is it just me?
Starting July 1, my Orbi logs have been filling up with [DoS Attack: SYN/ACK Scan] on port 80 entries from all the IP's in the 212.133.164.x subnet. If the IP's are not being spoofed, then this from...
I'm currently seeing some entries from this address:
23.62.78.137
Some other entries but mostly from this domain: 23.62.
FURRYe38 wrote:I'm currently seeing some entries from this address:
23.62.78.137
Some other entries but mostly from this domain: 23.62.
Looks as if this phenomenon is geographically different. I collect log files from two Orbi systems in the US (East Coast, West Coast) and have combined the DoS log reports from July 1 through mid July 10. (11,634 log entries). Put them in an Excel file that can be sorted on various columns. On Dropbox at https://www.dropbox.com/s/i2qmfep2v6e0y2d/July-1-10-Attacks.xlsx?dl=0 (My parsing algorithym messed up a couple of entries.)
It is bizzare. Some hit both systems, others only one. I can see trying ports 80, 443, 8080, etc. but some of the port numbers are just strange.
