NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

Cj877's avatar
Cj877
Aspirant
Nov 05, 2021

AX6 AX5200 Constant [Fraggle Attack] In Logs

Hey so I've had my ISP out multiple times to help try and isolate a recent packet loss problem that has been reoccuring for the last month or 2 now. At first it would happen during the day and then settle down the later it got in the night. They've replaced Coax cables and a wire from the house to the pole. I have also followed their recommendation of updating my hardware and so I did and I know both pieces support my internet speed (blaze from xfinity) (RAX48 and a SB6190 Modem) I have also noticed in my logs that I am receiving many fraggle attacks as well, is this something I should be worried about? I'm honestly out of ideas.

18 Replies

  • I am now for the first time receiving blocked Denial of Service notifications from NETARMOR on 'Wyze camera' the jank security system my mother installed for the house. Again I don't know if I should be worried and I really want to know if this could even be linked to my packet loss issues.

  • Well your ISP modem has a long standing known problem:

    http://www.badmodems.com/

     

    I'd recommend getting into a broadcom based modem first off. 

    Look up where those IP addresses are coming from using a WHOIS service. 

    Ask your ISP and see if they can change your WAN IP address. 

     

    Try a full reset of the router and setup from scratch. I would leave Armor disabled for a short period and see if the problems still happen. 

     

     

    • Cj877's avatar
      Cj877
      Aspirant

      FURRYe38 wrote:

      Well your ISP modem has a long standing known problem:

      http://www.badmodems.com/

       

      I'd recommend getting into a broadcom based modem first off. 

      Look up where those IP addresses are coming from using a WHOIS service. 

      Ask your ISP and see if they can change your WAN IP address. 

       

      Try a full reset of the router and setup from scratch. I would leave Armor disabled for a short period and see if the problems still happen. 

       

       


      FURRYe38  Hmm. That is interesting to find out. I will definitely be returning this at some point for sure. However my old Modem was a SB6141 from a few years back. I don't see that one in the list but I had began getting the packet loss with my old hardware (asus rtc3100 and that 6141 modem). Now the issue is still here, ISP is coming out a 3rd time with a more equipped tech they say, lol.
      I have yet to call the Cyber Agency side of Xfinity, which they told me to do for the DoS things. They said they couldn't change my IP when I asked on the forum.


      Now after using WHOIS I found out

      United States Chicago Akamai Technologies Inc. 
      Comcast Aurora
      And a new attack I haven't noticed yet [UDP FLOOD] that ip comes from
      United States Atlanta Service Provider Corporation

       



      • Cj877's avatar
        Cj877
        Aspirant

        I just found another new one. [TCP SYN Flood] coming from United States Los Angeles Level 3 Parent Llc.