! Suspicious activity- condensed Router log

Folks- newbie here..have a R6250 router running latest firmware...few wired devices and few mobile wifi devices using it.

I noticed some suspicious remote LAN access records and the DoS attacks from my router log.. I've pasted only 6 lines below- only relevant ones (deleted others like DHCP logins from my family's mobile, or admin login etc.). This is only a 24 hours extract but its concerning as youll see below..

[DoS attack: ACK Scan] attack packets in last 20 sec from ip [206.124.114.91], Tuesday, Aug 01,2017 21:28:17

[DoS attack: ACK Scan] attack packets in last 20 sec from ip [63.251.98.12], Tuesday, Aug 01,2017 17:42:05

[DoS attack: ACK Scan] attack packets in last 20 sec from ip [63.251.98.12], Tuesday, Aug 01,2017 17:49:23

[DoS attack: FIN Scan] attack packets in last 20 sec from ip [63.251.98.12], Tuesday, Aug 01,2017 17:57:24

[LAN access from remote] from 59.96.115.105:58909 to 192.168.1.85:46495, Wednesday, Aug 02,2017 06:01:00

[LAN access from remote] from 69.248.XX.XXX to 192.168.1.78:58862, Wednesday, Aug 02,2017 06:14:27

Could someone pls. help and point me in right directions...(69.248.XX.XXX is my own public IP) specially about what this Remote LAN access is- did someone manage to access my home network from somewhere in India ?? (abt remote login, an IP locator site says IP 59.96.115.105:58909 is from Bangalore India BSNL and another one says Indore India BSNL...very confusing?)

attach router r7000 r6250

Troubleshooting

DexterJB
Aug 15, 2017
Hi blackhole996,

These logs indicate that the packet/traffic has been dropped by the router. Unless you are experiencing a drastic slow down of the Internet speed, this is normal.

Regards,

Dexter

Community Team

Forum Discussion

! Suspicious activity- condensed Router log

3 Replies