NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

MRowe's avatar
MRowe
Guide
Feb 15, 2019
Solved

DoS Attack

Hi,

Should I worry about this:

[DoS Attack: SYN/ACK Scan] from source: 185.97.255.42, port 7778, Friday, February 15, 2019 11:03:56
DoS Attack: RST Scan] from source: 31.25.139.237, port 42779, Friday, February 15, 2019 11:02:27

[DoS Attack: ACK Scan] from source: 31.13.84.2, port 443, Friday, February 15, 2019 11:00:49

[DoS Attack: SYN/ACK Scan] from source: 185.97.255.42, port 7778, Friday, February 15, 2019 10:59:06

[DoS Attack: ACK Scan] from source: 31.13.84.2, port 443, Friday, February 15, 2019 10:58:46

[DoS Attack: ACK Scan] from source: 31.13.84.2, port 443, Friday, February 15, 2019 10:56:44

[DoS Attack: ACK Scan] from source: 31.13.84.2, port 443, Friday, February 15, 2019 10:54:41

[DoS Attack: ACK Scan] from source: 31.13.84.2, port 443, Friday, February 15, 2019 10:52:38

[DoS Attack: ACK Scan] from source: 31.13.84.2, port 443, Friday, February 15, 2019 10:50:35

 

Thanks

  • Use Domaintools.com whois feature to see what those IP addreses are coming from. Contact our ISP about changing the WAN IP address that the modem is passingthru and blocking.

    It's just the router reporting what it's detecting and blocking. It's doing it's job.

6 Replies

  • To Be Continued

    [DoS Attack: SYN/ACK Scan] from source: 138.94.200.255, port 39527, Friday, February 15, 2019 11:14:49

    [DoS Attack: Ping Sweep] from source: 27.223.78.170, Friday, February 15, 2019 11:12:06

  • FURRYe38's avatar
    FURRYe38
    Guru - Experienced User

    Use Domaintools.com whois feature to see what those IP addreses are coming from. Contact our ISP about changing the WAN IP address that the modem is passingthru and blocking.

    It's just the router reporting what it's detecting and blocking. It's doing it's job.

    • MRowe's avatar
      MRowe
      Guide

      Thanks. I called ISP they said they can't do nothing with this, but you confirmed that at least my router is just doing its job. That's fine. Many thanks again.

      • Netduma_Jack's avatar
        Netduma_Jack
        NetDuma Partner

        Often DoS attacks are just usual Internet white noise that your router is designed to block. So as your ISP advised, this is just a good sign that the router is doing its job.