NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
RBR50 randomly reboots
My RBR50 Router, connected to my AT&T BGW210 (AT&T Fiber), has been randomly rebooting about twice a week. Nothing in the logs. No indication of anything from the BGW210 side. We simply notice tha...
And several "attack" messages in the log, which I assume (perhaps incorrectly) is typical...
[DoS Attack: TCP/UDP Echo] from source: 89.248.163.150, port 52401, Tuesday, September 13, 2022 14:17:18
[DoS Attack: SYN/ACK Scan] from source: 74.91.112.166, port 8080, Tuesday, September 13, 2022 12:26:30
[DoS Attack: SYN/ACK Scan] from source: 222.92.255.14, port 39602, Tuesday, September 13, 2022 12:18:13
[DoS Attack: TCP/UDP Echo] from source: 71.6.135.131, port 27221, Tuesday, September 13, 2022 11:55:51
[DoS Attack: SYN/ACK Scan] from source: 91.218.213.49, port 8000, Tuesday, September 13, 2022 11:23:23
[DoS Attack: ACK Scan] from source: 52.96.79.37, port 8678, Tuesday, September 13, 2022 11:00:24
[DoS Attack: RST Scan] from source: 199.187.116.122, port 30106, Tuesday, September 13, 2022 10:53:09
[DoS Attack: ACK Scan] from source: 52.96.79.82, port 443, Tuesday, September 13, 2022 10:18:22
jimmauro wrote:
And several "attack" messages in the log, which I assume (perhaps incorrectly) is typical...
Your assumption is correct.
I have kept every log file for over three years, and every single day there are many (many) such log entries. My feeling is that this is a normal and unavoidable consequence of connecting to the internet.
For example, by having a telephone, I now get at least 20 calls every day wanting to "Press 1 to learn if my house qualifies for drought tolerant landscape, solar panels, double pane windows. Press 9 to be removed from the list." By having a mailbox, I get catalogs and advertisements that I never asked for. By connecting to the internet, I now have every pimply-faced teenager in the world wondering if there are any ports open on my router.
There is an option to turn off the feature of logging these (possible) attack scans.