NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Internet dropping, logs say dos attack icmp flood from different ips (C6300v2)
Hello, I have been having this issue for about two weeks now. My wireless devices will randomly drop connection and when I'm on my desktop (wired) I get lag and or bad packet loss also randomly. es...
Tech came by today and said the line was good, said the power was too high and lowered the power. After they left I rebooted the router and there wasn't any correctable or uncorrectable and the internet seemed to be fine. Checked the admin page later and there is a bunch of correctable and uncorrectable and there is still more of those ICMP FLOOD DOS attacks from random IP addresses. But, I haven't had any issues with loosing connect so far. About to see if that still holds true with playing some games.
Should I be worried about the multiple [DOS attack] ICMP Flood attacks ?
Should I be worried about the PORT Scan PROTO TCP dos attack?? (source IP is 60.161.81.116 somewhere in china)
If I still have issues what should I do, the tech said the lines looked fine and lowered the power with a thing he put on the coax?
Also haven't had any more criticals since the tech came.
Ill attach screen shots again.
Some clarification on if those two types of dos attacks are a security threat and if so how to protect myself would be greatly appreciated, to but me at ease or into action.
Played some games and had no issues so the internet dropping and packet loss issue is fix yay!
Only thing now is should I be worried about the Dos attacks and the Port scan proto?
there was another one while I was playing squad an online game.
the line says [Dos attack] Port Scan PROTO:TCP SPT: some numbers and then DPT: some numbers from another IP from china from TenCent cloud computing.
So basically should I be worried about those ?
You still have too much Correct and Uncorrecables.
Most of the time these attacks are just that, attacks that were blocked and just reported in the logs by the system.
Yeah I don't think the correctable and uncorrectable will be fixed. All my cables I can access are secure and in good shape and I doubt COX will run new line since the tech said it was fine. Even with those the connection has been fine since the tech left and haven't had any issues.
So I think the man issue of this thread is solved.
But, to just confirm and recap the dos attacks and port scans that show up in the logs are fine and I shouldn't worry about them even if the log is showing the port they scanned i.e. SPT:xxxxx and DPT:xxxx correct? I haven't made any changes to the settings of the router/modem besides changing the password, the wifi names and passcodes, and the DNS server.
So, if there isn't anything to worry about I really appreciate the help and answers you gave. Thank you!
Should be unless you notice something out of the ordinary.
Might ask the ISP if they can change the WAN IP as one step to see if something happens. Most of the scans and attacks are seen across modems and routers. The logs just report that it took place and was stopped by the system.
PW changes and such is good.
Come back if you see something drastic happen or contact the ISP if this comes from the WAN side. Sometimes they can help in some places.
