NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

Mrbchambers's avatar
Mrbchambers
Guide
Feb 18, 2020

Troubling messages in log: Dos Attack: DHCP leases changinging: Geofilter Changing.

Setup:- XR500, TP link N600 in bridge mode, Too many PC's game console to name here, though none of these are relevant. I have a VDSL2 connection to the house hence the TPlink.   All has been well ...
Netduma-Fraser's avatar
Netduma-Fraser
NetDuma Partner
Feb 18, 2020
DoS attacks are normal entries, they just show connections you've come into contact with. DHCP Lease changes are normal as well. What messages are you referring to? Could you provide a screenshot of the Geo-Filter filtering when it shouldn't please?
  • Mrbchambers's avatar
    Mrbchambers
    Guide
    Feb 18, 2020

    I did try to add a text file but it wouldn't let me. Also it should be noted it is the rate these messages are generated.

     

    I don't know how to send you a screen shot of my friends not being able to get into the same game lobby/session as me. Though I must admit I haven't looked at the geofilter when they can't access my lobbies/sessions, I will look next time and post what I find.

     

    Here is the log:- 

     

    DumaOS] config write 'com.netdumsoftware.geofilter.settings', Tuesday, February 18, 2020 23:23:20
    [DumaOS] config write 'com.netdumsoftware.geofilter.settings', Tuesday, February 18, 2020 23:23:20
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:23:14
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:23:14
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:22:41
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:22:41
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:22:07
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:22:07
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:21:34
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:21:34
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:21:00
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:21:00
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:20:26
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:20:26
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:19:53
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:19:53
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:19:19
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:19:19
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:19:17
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:19:17
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:18:47
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:18:47
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:18:13
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:18:13
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:17:40
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:17:40
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:17:06
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:17:06
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:16:32
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:16:32
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:15:58
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:15:58
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:15:49
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:15:49
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:15:25
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:15:25
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:14:51
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:14:51
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:14:17
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:14:17
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:13:44
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:13:44
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:13:10
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:13:10
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:12:36
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:12:36
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:12:02
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:12:02
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:11:29
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:11:29
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:10:55
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:10:55
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:10:21
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:10:21
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:09:48
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:09:48
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:09:14
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:09:14
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:08:41
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:08:41
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:08:08
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:08:08
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:07:34
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:07:34
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:07:01
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:07:01
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:06:27
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:06:27
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:05:54
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:05:54
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:05:20
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:05:20
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:04:47
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:04:47
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:04:12
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:04:12
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:03:37
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:03:37
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:03:03
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:03:03
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:02:30
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:02:30
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:01:56
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:01:56
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:01:38
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:01:38
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:01:22
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:01:22
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:00:49
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:00:49
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 23:00:16
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 23:00:16
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 22:59:42
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 22:59:42
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 22:59:09
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 22:59:09
    [DoS Attack: ACK Scan] from source: 94.136.40.162, port 993, Tuesday, February 18, 2020 22:58:58
    [DoS Attack: ACK Scan] from source: 94.136.40.162, port 993, Tuesday, February 18, 2020 22:58:58
    [DoS Attack: ACK Scan] from source: 94.136.40.162, port 993, Tuesday, February 18, 2020 22:58:58
    [DoS Attack: ACK Scan] from source: 94.136.40.162, port 993, Tuesday, February 18, 2020 22:58:57
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 22:58:35
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 22:58:35
    [DoS Attack: ACK Scan] from source: 3.86.138.203, port 443, Tuesday, February 18, 2020 22:58:24
    [DoS Attack: ACK Scan] from source: 94.136.40.162, port 993, Tuesday, February 18, 2020 22:58:09
    [DoS Attack: ACK Scan] from source: 3.86.138.203, port 443, Tuesday, February 18, 2020 22:58:09
    [DoS Attack: ACK Scan] from source: 94.136.40.162, port 993, Tuesday, February 18, 2020 22:58:08
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 22:58:02
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 22:58:02
    [DoS Attack: ACK Scan] from source: 94.136.40.162, port 993, Tuesday, February 18, 2020 22:57:58
    [DoS Attack: ACK Scan] from source: 94.136.40.162, port 993, Tuesday, February 18, 2020 22:57:58
    [DoS Attack: ACK Scan] from source: 17.248.144.236, port 443, Tuesday, February 18, 2020 22:57:56
    [DoS Attack: ACK Scan] from source: 17.248.144.176, port 443, Tuesday, February 18, 2020 22:57:55
    [DoS Attack: ACK Scan] from source: 17.248.144.208, port 443, Tuesday, February 18, 2020 22:57:54
    [DoS Attack: ACK Scan] from source: 3.86.138.203, port 443, Tuesday, February 18, 2020 22:57:54
    [DoS Attack: ACK Scan] from source: 3.86.138.203, port 443, Tuesday, February 18, 2020 22:57:39
    [DoS Attack: ACK Scan] from source: 17.248.144.236, port 443, Tuesday, February 18, 2020 22:57:39
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 22:57:28
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 22:57:28
    [DoS Attack: ACK Scan] from source: 3.86.138.203, port 443, Tuesday, February 18, 2020 22:57:24
    [DoS Attack: ACK Scan] from source: 3.86.138.203, port 443, Tuesday, February 18, 2020 22:57:09
    [DoS Attack: ACK Scan] from source: 94.136.40.162, port 993, Tuesday, February 18, 2020 22:57:05
    [DoS Attack: ACK Scan] from source: 94.136.40.162, port 993, Tuesday, February 18, 2020 22:57:04
    [DoS Attack: ACK Scan] from source: 94.136.40.162, port 993, Tuesday, February 18, 2020 22:56:58
    [DoS Attack: ACK Scan] from source: 94.136.40.162, port 993, Tuesday, February 18, 2020 22:56:58
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 22:56:55
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 22:56:55
    [DoS Attack: ACK Scan] from source: 3.86.138.203, port 443, Tuesday, February 18, 2020 22:56:54
    [DoS Attack: ACK Scan] from source: 3.86.138.203, port 443, Tuesday, February 18, 2020 22:56:39
    [DoS Attack: ACK Scan] from source: 3.86.138.203, port 443, Tuesday, February 18, 2020 22:56:24
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 22:56:22
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 22:56:22
    [DoS Attack: ACK Scan] from source: 3.86.138.203, port 443, Tuesday, February 18, 2020 22:56:09
    [DoS Attack: ACK Scan] from source: 94.136.40.162, port 993, Tuesday, February 18, 2020 22:56:01
    [DoS Attack: ACK Scan] from source: 94.136.40.162, port 993, Tuesday, February 18, 2020 22:56:00
    [DoS Attack: ACK Scan] from source: 17.248.144.236, port 443, Tuesday, February 18, 2020 22:55:59
    [DoS Attack: ACK Scan] from source: 17.248.144.211, port 443, Tuesday, February 18, 2020 22:55:52
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 22:55:48
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 22:55:48
    [DumaOS] DHCP lease change., Tuesday, February 18, 2020 22:55:15
    [DumaOS] DHCP new event., Tuesday, February 18, 2020 22:55:15
    [DoS Attack: ACK Scan] from source: 17.248.144.236, port 443, Tuesday, February 18, 2020 22:54:57
    [DoS Attack: ACK Scan] from source: 17.248.144.211, port 443, Tuesday, February 18, 2020 22:54:54

     

    • Netduma-Fraser's avatar
      Netduma-Fraser
      NetDuma Partner
      Feb 19, 2020
      The screenshots or even a small video would be really helpful in determining what the cause may be so if possible I'd appreciate it. The changes are very frequent, how many devices do you have connected to the router? Are the lease changes causing disconnects at all?
      • Mrbchambers's avatar
        Mrbchambers
        Guide
        Feb 23, 2020

        What is this new message? The one starting "Error parsing line in ARP table:......" There are a number of these in the log, and when these happend, I was removed from my game world and couldn' connect to the internet.

         

        something has happened to this router, and I dont know what, you keep telling me that messages in logs are usual, even though they dont appear to tell what is happening. What should I be looking for?

         

        Please help!

         

         

        [DumaOS] DHCP new event., Sunday, February 23, 2020 18:28:55
        [DumaOS] DHCP lease change., Sunday, February 23, 2020 18:28:22
        [DumaOS] DHCP new event., Sunday, February 23, 2020 18:28:22
        [DumaOS] Error parsing line in ARP table: 'fe80::c883:62ff:fed9:8622 dev brwan lladdr ec:08:6b:e3:01:ee router STALE', Sunday, F