NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Lots of dos attacks from China?
So I'm getting a bunch of these right now and most of the IP's are from China. What should I do? [DoS Attack: SYN/ACK Scan] from source: 39.107.196.251, port 80, Thursday, October 24, 2019 21:04:...
Yes, this behavior is dramatically worse today than before, by a factor of 4 or 5.
There is nothing a person can do. This is like those horrible robo-calls. Some ghoul is sending packets to your public IP address and the Orbi firewall software is putting entries in the log saying that it recognizes patterns in those packets.
The Orbi does not accept connections from the internet unless the user has specifically told it to (a) by activating Remote Management or (b) by setting up OpenVPN.
It is possible to stop logging DoS and port scans. They will still happen, but the log will no longer show them.
I mean should I power cycle my modem and prob unit? Or should I call Comcast to change my I'm address?
I do not see how changing the public IP address will accomplish anything. People doing this are simply trying evey possible IP address. Likewise, power cycling the modem or Orbi won't change anything.
(Editorial: This situation is very much like the robo-call mess. If our tiny Orbi can detect that someone is sending "bad packets" our way, surely the ISP network could detect this behavior at the source and take action against the people doing it. Oh, well.)
So it's basically a waiting game at this point.
It will never end. Personally, it reminds me that the internet is a jungle. I like to look through the logs every once in a while, but basically ignore this stuff. People who do not look at router logs are blissfully ignorant, and probably happier, too.
YOu might power OFF the ISP modem and RBR, say right before you go to bed, then power ON in the morning and see if the logs are still filling up.
I would contact your ISP and check about changing the WAN IP address to see if this might help some.
RedBatman89 wrote:I mean should I power cycle my modem and prob unit? Or should I call Comcast to change my I'm address?
Hi I just wanna say today the logs are much better. The attacks have gone back down to the bare minimum they are at normally. So good thing for that.
My logs have gone back to normal as well. Was exciting while it lasted.
