NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

ButterSquatch's avatar
Jul 23, 2022

Internet dropping, logs say dos attack icmp flood from different ips (C6300v2)

Hello, 

I have been having this issue for about two weeks now. My wireless devices will randomly drop connection and when I'm on my desktop (wired) I get lag and or bad packet loss also randomly. especially while playing games and sometimes while browsing the internet. I have tried to do accouple of things that hasn't worked including changing my DNS, changing my coax to the modem and ethernet to my pc, and resetting my modem quite a few times. I have contacted my ISP (cox) and they believe its an issue with wiring and sending a tech out to look into it. I have noticed that it will drop sometimes when there isn't a ICMP flood. I'm just getting frustrated with this and would like some help figuring it out and solving it. I will attach screen shots of the logs and event logs to see if that will help.

 

My MODEL is the C6300v2, FIRMWARE is V1.03.04 (there is no update firmware in the admin setting of modem). 

 

Could a damaged cable or connection cause this? 

 

Is it my ISP screwing me over in a bit to make me upgrade/ Them putting too many people on there service in one area? (live in an apartment)

 

Some of the ICMP floods are random IP addresses and it seems to me to be hitting my modems IP not any devices on my network (if that's a thing idk about network stuff) that IP on the logs as the target is the same one under internet port in the advanced home. some of the more recent IP addresses are coming from AWS but some of the old ones where from random places like Denver and Albania. There is a constant ICMP flood from  fe80:0000:0000:0000:6e13:d5ff:fe21:d019 about every 10 min. form what I could find this is just the ISP talking to my router?? 

 

Any help would be appreciated greatly thank you.

 

 

 

14 Replies

  • FURRYe38's avatar
    FURRYe38
    Guru - Experienced User

    Please post a copy and paste of the modems connection status page.

    • ButterSquatch's avatar
      ButterSquatch
      Aspirant

      not sure which one is the connection status screen but all the things say they are green and connected. Ill attach what I think you are asking about. Just let me know if its not the right thing. 

      Thank you for the reply! 

      Also have notice there is more ICMP flood attacks in the logs more from amazon and again some from other places around the world. could my Alexa's be causing this?

       

       

      • ButterSquatch's avatar
        ButterSquatch
        Aspirant

        Checked the cable connection again tonight and this is what it is showing. I'm still getting drops in service and those ICMP flood dos attacks are still happening from random IP addresses. 

        Ill attach screen caps of both.