Explication des log

> Apareil : R700

   "R7000"?  Firmware version?

> Nous avons récemment subit une attaque ranconware.

   Any evidence that the router was at fault?

> [LAN access from remote] from 45.83.67.150:7611 to 192.168.1.XXX:22,
> Saturday, Jan 16,2021 13:13:01
> Cela signifie-til que l'ip 45.83.67.150 c'est connecté et réussie vian l
> aport 7611 ou est-ce une tentative ?

   "[LAN access from remote]" denotes a successful connection.

      https://apps.db.ripe.net/db-web-ui/query?bflag=false&dflag=false&rflag=true&searchtext=45.83.67.150

   The remote port (":7611") is not significant.

   There's no need to hide your LAN IP address ("XXX").

   Port 22 is SSH (including SFTP, and so on).  Do you have a
port-forwarding rule which targets port 22 on "192.168.1.XXX"?

   If so, did you also specify port 22 as the external port?  That would
be unwise.  Attacks on port 22 are very common.

> [DoS attack: Smurf] attack packets in last 20 sec from ip
> [34.213.222.255], Saturday, Jan 16,2021 10:53:49

   I know nothing about that.  I'd guess that if the router thinks that
it's an "attack", that then it stopped it.

      https://whois.arin.net/rest/net/NET-34-192-0-0-1/pft?s=34.213.222.255

   Bad behavior from Amazon AWS systems is not unusual.

> Comment faire pour que des tentatives multiples soit automatiquement
> Bloquées ?

   Get a much smarter router?