NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
MRowe
Feb 15, 2019Guide
DoS Attack
Hi,
Should I worry about this:
[DoS Attack: SYN/ACK Scan] from source: 185.97.255.42, port 7778, Friday, February 15, 2019 11:03:56
DoS Attack: RST Scan] from source: 31.25.139.237, port 42779, Friday, February 15, 2019 11:02:27
[DoS Attack: ACK Scan] from source: 31.13.84.2, port 443, Friday, February 15, 2019 11:00:49
[DoS Attack: SYN/ACK Scan] from source: 185.97.255.42, port 7778, Friday, February 15, 2019 10:59:06
[DoS Attack: ACK Scan] from source: 31.13.84.2, port 443, Friday, February 15, 2019 10:58:46
[DoS Attack: ACK Scan] from source: 31.13.84.2, port 443, Friday, February 15, 2019 10:56:44
[DoS Attack: ACK Scan] from source: 31.13.84.2, port 443, Friday, February 15, 2019 10:54:41
[DoS Attack: ACK Scan] from source: 31.13.84.2, port 443, Friday, February 15, 2019 10:52:38
[DoS Attack: ACK Scan] from source: 31.13.84.2, port 443, Friday, February 15, 2019 10:50:35
Thanks
Use Domaintools.com whois feature to see what those IP addreses are coming from. Contact our ISP about changing the WAN IP address that the modem is passingthru and blocking.
It's just the router reporting what it's detecting and blocking. It's doing it's job.
6 Replies
- MRoweGuide
To Be Continued
[DoS Attack: SYN/ACK Scan] from source: 138.94.200.255, port 39527, Friday, February 15, 2019 11:14:49
[DoS Attack: Ping Sweep] from source: 27.223.78.170, Friday, February 15, 2019 11:12:06
- FURRYe38Guru - Experienced User
Use Domaintools.com whois feature to see what those IP addreses are coming from. Contact our ISP about changing the WAN IP address that the modem is passingthru and blocking.
It's just the router reporting what it's detecting and blocking. It's doing it's job.
- MRoweGuide
Thanks. I called ISP they said they can't do nothing with this, but you confirmed that at least my router is just doing its job. That's fine. Many thanks again.
- Netduma_JackNetDuma Partner
Often DoS attacks are just usual Internet white noise that your router is designed to block. So as your ISP advised, this is just a good sign that the router is doing its job.