NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Internet dropping, logs say dos attack icmp flood from different ips (C6300v2)
Hello, I have been having this issue for about two weeks now. My wireless devices will randomly drop connection and when I'm on my desktop (wired) I get lag and or bad packet loss also randomly. es...
You have come correct and un-correctables that should be Zeros. Check and make sure all fittings are snug, no kinks in the cable line up to the modem. Be sure your using good quality RG6 coax cabling. Remove any coax line splitters.
The power is TOO high. ISP needs to turn the power down:
https://kb.netgear.com/24311/Power-level-guidelines-for-a-NETGEAR-cable-modem-router?article=24311
Lots of Criticals that the ISP needs to look at as well. Have the ISP check the signal and line quality UP to the modem. Be sure the ISP provisions the modem correctly.
Tech came by today and said the line was good, said the power was too high and lowered the power. After they left I rebooted the router and there wasn't any correctable or uncorrectable and the internet seemed to be fine. Checked the admin page later and there is a bunch of correctable and uncorrectable and there is still more of those ICMP FLOOD DOS attacks from random IP addresses. But, I haven't had any issues with loosing connect so far. About to see if that still holds true with playing some games.
Should I be worried about the multiple [DOS attack] ICMP Flood attacks ?
Should I be worried about the PORT Scan PROTO TCP dos attack?? (source IP is 60.161.81.116 somewhere in china)
If I still have issues what should I do, the tech said the lines looked fine and lowered the power with a thing he put on the coax?
Also haven't had any more criticals since the tech came.
Ill attach screen shots again.
Some clarification on if those two types of dos attacks are a security threat and if so how to protect myself would be greatly appreciated, to but me at ease or into action.
Played some games and had no issues so the internet dropping and packet loss issue is fix yay!
Only thing now is should I be worried about the Dos attacks and the Port scan proto?
there was another one while I was playing squad an online game.
the line says [Dos attack] Port Scan PROTO:TCP SPT: some numbers and then DPT: some numbers from another IP from china from TenCent cloud computing.
So basically should I be worried about those ?
You still have too much Correct and Uncorrecables.
Most of the time these attacks are just that, attacks that were blocked and just reported in the logs by the system.
Yeah I don't think the correctable and uncorrectable will be fixed. All my cables I can access are secure and in good shape and I doubt COX will run new line since the tech said it was fine. Even with those the connection has been fine since the tech left and haven't had any issues.
So I think the man issue of this thread is solved.
But, to just confirm and recap the dos attacks and port scans that show up in the logs are fine and I shouldn't worry about them even if the log is showing the port they scanned i.e. SPT:xxxxx and DPT:xxxx correct? I haven't made any changes to the settings of the router/modem besides changing the password, the wifi names and passcodes, and the DNS server.
So, if there isn't anything to worry about I really appreciate the help and answers you gave. Thank you!