NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

Mrbchambers's avatar
Feb 18, 2020

Troubling messages in log: Dos Attack: DHCP leases changinging: Geofilter Changing.

Setup:- XR500, TP link N600 in bridge mode, Too many PC's game console to name here, though none of these are relevant. I have a VDSL2 connection to the house hence the TPlink.

 

All has been well with the modem and connection, no real issues. Until about 2 days ago; when the geo filter stopped working, and my internet seemed to be falling apart. I plugged in my ISP's router (BT Smart Hub), and the internet was working as expected with their router. So I plugged in the XR500 and it all went wrong again. I factory reset the router as discribed in several forums, both here and on Netduma forums. Thats when the messages started to appear, and (I know this may not be of a concern to you, but for completeness) the geo filter is doing things it hasnt done before eg: it keeps filtering when I put it in spectator mode; or delete the device. I will raise this when I get onto the Netduma site.

 

Please help, its becoming worrying.

10 Replies

  • DoS attacks are normal entries, they just show connections you've come into contact with. DHCP Lease changes are normal as well. What messages are you referring to? Could you provide a screenshot of the Geo-Filter filtering when it shouldn't please?
    • Mrbchambers's avatar
      Mrbchambers
      Guide

      I did try to add a text file but it wouldn't let me. Also it should be noted it is the rate these messages are generated.

       

      I don't know how to send you a screen shot of my friends not being able to get into the same game lobby/session as me. Though I must admit I haven't looked at the geofilter when they can't access my lobbies/sessions, I will look next time and post what I find.

       

      Here is the log:- 

       

      DumaOS] config write 'com.netdumsoftware.geofilter.settings', Tuesday, February 18, 2020 23:23:20
      [DumaOS] config write 'com.netdumsoftware.geofilter.settings', Tuesday, February 18, 2020 23:23:20
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:23:14
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:23:14
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:22:41
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:22:41
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:22:07
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:22:07
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:21:34
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:21:34
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:21:00
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:21:00
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:20:26
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:20:26
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:19:53
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:19:53
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:19:19
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:19:19
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:19:17
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:19:17
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:18:47
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:18:47
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:18:13
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:18:13
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:17:40
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:17:40
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:17:06
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:17:06
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:16:32
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:16:32
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:15:58
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:15:58
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:15:49
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:15:49
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:15:25
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:15:25
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:14:51
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:14:51
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:14:17
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:14:17
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:13:44
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:13:44
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:13:10
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:13:10
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:12:36
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:12:36
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:12:02
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:12:02
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:11:29
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:11:29
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:10:55
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:10:55
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:10:21
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:10:21
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:09:48
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:09:48
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:09:14
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:09:14
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:08:41
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:08:41
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:08:08
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:08:08
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:07:34
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:07:34
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:07:01
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:07:01
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:06:27
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:06:27
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:05:54
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:05:54
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:05:20
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:05:20
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:04:47
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:04:47
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:04:12
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:04:12
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:03:37
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:03:37
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:03:03
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:03:03
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:02:30
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:02:30
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:01:56
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:01:56
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:01:38
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:01:38
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:01:22
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:01:22
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:00:49
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:00:49
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:00:16
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:00:16
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 22:59:42
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 22:59:42
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 22:59:09
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 22:59:09
      [DoS Attack: ACK Scan] from source: 94.136.40.162, port 993, Tuesday, February 18, 2020 22:58:58
      [DoS Attack: ACK Scan] from source: 94.136.40.162, port 993, Tuesday, February 18, 2020 22:58:58
      [DoS Attack: ACK Scan] from source: 94.136.40.162, port 993, Tuesday, February 18, 2020 22:58:58
      [DoS Attack: ACK Scan] from source: 94.136.40.162, port 993, Tuesday, February 18, 2020 22:58:57
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 22:58:35
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 22:58:35
      [DoS Attack: ACK Scan] from source: 3.86.138.203, port 443, Tuesday, February 18, 2020 22:58:24
      [DoS Attack: ACK Scan] from source: 94.136.40.162, port 993, Tuesday, February 18, 2020 22:58:09
      [DoS Attack: ACK Scan] from source: 3.86.138.203, port 443, Tuesday, February 18, 2020 22:58:09
      [DoS Attack: ACK Scan] from source: 94.136.40.162, port 993, Tuesday, February 18, 2020 22:58:08
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 22:58:02
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 22:58:02
      [DoS Attack: ACK Scan] from source: 94.136.40.162, port 993, Tuesday, February 18, 2020 22:57:58
      [DoS Attack: ACK Scan] from source: 94.136.40.162, port 993, Tuesday, February 18, 2020 22:57:58
      [DoS Attack: ACK Scan] from source: 17.248.144.236, port 443, Tuesday, February 18, 2020 22:57:56
      [DoS Attack: ACK Scan] from source: 17.248.144.176, port 443, Tuesday, February 18, 2020 22:57:55
      [DoS Attack: ACK Scan] from source: 17.248.144.208, port 443, Tuesday, February 18, 2020 22:57:54
      [DoS Attack: ACK Scan] from source: 3.86.138.203, port 443, Tuesday, February 18, 2020 22:57:54
      [DoS Attack: ACK Scan] from source: 3.86.138.203, port 443, Tuesday, February 18, 2020 22:57:39
      [DoS Attack: ACK Scan] from source: 17.248.144.236, port 443, Tuesday, February 18, 2020 22:57:39
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 22:57:28
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 22:57:28
      [DoS Attack: ACK Scan] from source: 3.86.138.203, port 443, Tuesday, February 18, 2020 22:57:24
      [DoS Attack: ACK Scan] from source: 3.86.138.203, port 443, Tuesday, February 18, 2020 22:57:09
      [DoS Attack: ACK Scan] from source: 94.136.40.162, port 993, Tuesday, February 18, 2020 22:57:05
      [DoS Attack: ACK Scan] from source: 94.136.40.162, port 993, Tuesday, February 18, 2020 22:57:04
      [DoS Attack: ACK Scan] from source: 94.136.40.162, port 993, Tuesday, February 18, 2020 22:56:58
      [DoS Attack: ACK Scan] from source: 94.136.40.162, port 993, Tuesday, February 18, 2020 22:56:58
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 22:56:55
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 22:56:55
      [DoS Attack: ACK Scan] from source: 3.86.138.203, port 443, Tuesday, February 18, 2020 22:56:54
      [DoS Attack: ACK Scan] from source: 3.86.138.203, port 443, Tuesday, February 18, 2020 22:56:39
      [DoS Attack: ACK Scan] from source: 3.86.138.203, port 443, Tuesday, February 18, 2020 22:56:24
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 22:56:22
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 22:56:22
      [DoS Attack: ACK Scan] from source: 3.86.138.203, port 443, Tuesday, February 18, 2020 22:56:09
      [DoS Attack: ACK Scan] from source: 94.136.40.162, port 993, Tuesday, February 18, 2020 22:56:01
      [DoS Attack: ACK Scan] from source: 94.136.40.162, port 993, Tuesday, February 18, 2020 22:56:00
      [DoS Attack: ACK Scan] from source: 17.248.144.236, port 443, Tuesday, February 18, 2020 22:55:59
      [DoS Attack: ACK Scan] from source: 17.248.144.211, port 443, Tuesday, February 18, 2020 22:55:52
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 22:55:48
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 22:55:48
      [DumaOS] DHCP lease change., Tuesday, February 18, 2020 22:55:15
      [DumaOS] DHCP new event., Tuesday, February 18, 2020 22:55:15
      [DoS Attack: ACK Scan] from source: 17.248.144.236, port 443, Tuesday, February 18, 2020 22:54:57
      [DoS Attack: ACK Scan] from source: 17.248.144.211, port 443, Tuesday, February 18, 2020 22:54:54

       

      • Netduma-Fraser's avatar
        Netduma-Fraser
        NetDuma Partner
        The screenshots or even a small video would be really helpful in determining what the cause may be so if possible I'd appreciate it. The changes are very frequent, how many devices do you have connected to the router? Are the lease changes causing disconnects at all?