NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
ButterSquatch
Jul 23, 2022Aspirant
Internet dropping, logs say dos attack icmp flood from different ips (C6300v2)
Hello, I have been having this issue for about two weeks now. My wireless devices will randomly drop connection and when I'm on my desktop (wired) I get lag and or bad packet loss also randomly. es...
FURRYe38
Jul 23, 2022Guru - Experienced User
Please post a copy and paste of the modems connection status page.
ButterSquatch
Jul 25, 2022Aspirant
- ButterSquatchJul 25, 2022Aspirant
Checked the cable connection again tonight and this is what it is showing. I'm still getting drops in service and those ICMP flood dos attacks are still happening from random IP addresses.
Ill attach screen caps of both.
- FURRYe38Jul 25, 2022Guru - Experienced User
You have come correct and un-correctables that should be Zeros. Check and make sure all fittings are snug, no kinks in the cable line up to the modem. Be sure your using good quality RG6 coax cabling. Remove any coax line splitters.
The power is TOO high. ISP needs to turn the power down:
https://kb.netgear.com/24311/Power-level-guidelines-for-a-NETGEAR-cable-modem-router?article=24311
Lots of Criticals that the ISP needs to look at as well. Have the ISP check the signal and line quality UP to the modem. Be sure the ISP provisions the modem correctly.
- ButterSquatchJul 26, 2022Aspirant
Tech came by today and said the line was good, said the power was too high and lowered the power. After they left I rebooted the router and there wasn't any correctable or uncorrectable and the internet seemed to be fine. Checked the admin page later and there is a bunch of correctable and uncorrectable and there is still more of those ICMP FLOOD DOS attacks from random IP addresses. But, I haven't had any issues with loosing connect so far. About to see if that still holds true with playing some games.
Should I be worried about the multiple [DOS attack] ICMP Flood attacks ?
Should I be worried about the PORT Scan PROTO TCP dos attack?? (source IP is 60.161.81.116 somewhere in china)
If I still have issues what should I do, the tech said the lines looked fine and lowered the power with a thing he put on the coax?
Also haven't had any more criticals since the tech came.
Ill attach screen shots again.
Some clarification on if those two types of dos attacks are a security threat and if so how to protect myself would be greatly appreciated, to but me at ease or into action.