NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
R6400v2 DDoS Smurf attacks constantly
For the last month or so, I have been having my router send me via email the LOGS every day ... and every day I keep seeing these DDoS attacks that are coming all the time and coming from different IPs in different countries - the one from yesterday was from Indonesia and I need to know HOW to stop this from happening! I work in IT, so I have modified the security on my router many many times and have updated to the latest firmware as soon as it's released! Please help! See below for the log file from yesterday for reference:
[DHCP IP: (192.168.1.12)] to MAC address E6:23:0A:33:43:48, Thursday, Jan 28,2021 09:21:26
[DHCP IP: (192.168.1.7)] to MAC address B8:08:CF:82:99:11, Thursday, Jan 28,2021 09:00:49
[Time synchronized with NTP server] Thursday, Jan 28,2021 08:59:02
[Internet connected] IP address: 47.227.168.195, Thursday, Jan 28,2021 08:59:01
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [151.101.194.217], Thursday, Jan 28,2021 01:16:05
[DHCP IP: (192.168.1.3)] to MAC address 6A:33:DE:19:A1:58, Wednesday, Jan 27,2021 23:35:10
[DHCP IP: (192.168.1.4)] to MAC address 30:CD:A7:31:E6:AF, Wednesday, Jan 27,2021 23:33:25
[Time synchronized with NTP server] Wednesday, Jan 27,2021 23:33:18
[Internet connected] IP address: 47.227.168.195, Wednesday, Jan 27,2021 23:33:17
[DoS attack: Smurf] attack packets in last 20 sec from ip [104.44.28.255], Wednesday, Jan 27,2021 21:24:31
[DHCP IP: (192.168.1.12)] to MAC address E6:23:0A:33:43:48, Wednesday, Jan 27,2021 21:21:27
[DoS attack: Smurf] attack packets in last 20 sec from ip [192.168.1.6], Wednesday, Jan 27,2021 20:49:09
[DoS attack: Smurf] attack packets in last 20 sec from ip [192.168.1.6], Wednesday, Jan 27,2021 20:47:33
[DHCP IP: (192.168.1.6)] to MAC address 24:0A:64:AC:AF:75, Wednesday, Jan 27,2021 19:09:07
[DHCP IP: (192.168.1.6)] to MAC address 24:0A:64:AC:AF:75, Wednesday, Jan 27,2021 17:17:21
[DHCP IP: (192.168.1.6)] to MAC address 24:0A:64:AC:AF:75, Wednesday, Jan 27,2021 16:51:34
[DoS attack: Smurf] attack packets in last 20 sec from ip [110.137.100.255], Wednesday, Jan 27,2021 16:35:49
[DoS attack: Smurf] attack packets in last 20 sec from ip [110.137.100.255], Wednesday, Jan 27,2021 16:35:17
[DoS attack: Smurf] attack packets in last 20 sec from ip [182.185.100.255], Wednesday, Jan 27,2021 16:34:55
[DoS attack: Smurf] attack packets in last 20 sec from ip [182.185.100.255], Wednesday, Jan 27,2021 16:34:14
[DHCP IP: (192.168.1.6)] to MAC address 24:0A:64:AC:AF:75, Wednesday, Jan 27,2021 16:29:31
[DHCP IP: (192.168.1.6)] to MAC address 24:0A:64:AC:AF:75, Wednesday, Jan 27,2021 11:38:10
[DoS attack: Smurf] attack packets in last 20 sec from ip [47.227.168.195], Wednesday, Jan 27,2021 11:36:59
[DoS attack: Smurf] attack packets in last 20 sec from ip [47.227.168.195], Wednesday, Jan 27,2021 11:36:30
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [104.95.58.48], Wednesday, Jan 27,2021 11:36:07
[DoS attack: Smurf] attack packets in last 20 sec from ip [47.227.168.195], Wednesday, Jan 27,2021 11:36:01
[DoS attack: Smurf] attack packets in last 20 sec from ip [47.227.168.195], Wednesday, Jan 27,2021 11:35:33
[DoS attack: Smurf] attack packets in last 20 sec from ip [47.227.168.195], Wednesday, Jan 27,2021 11:35:04
[DHCP IP: (192.168.1.3)] to MAC address 6A:33:DE:19:A1:58, Wednesday, Jan 27,2021 11:34:57
[DHCP IP: (192.168.1.2)] to MAC address 6A:33:DE:19:A1:58, Wednesday, Jan 27,2021 11:34:31
[Admin login] from source 192.168.1.5, Wednesday, Jan 27,2021 11:34:04
[DHCP IP: (192.168.1.5)] to MAC address 28:7F:CF:B9:23:BE, Wednesday, Jan 27,2021 11:33:25
[DHCP IP: (192.168.1.4)] to MAC address 30:CD:A7:31:E6:AF, Wednesday, Jan 27,2021 11:33:22
[Time synchronized with NTP server] Wednesday, Jan 27,2021 11:33:16
[Internet connected] IP address: 47.227.168.195, Wednesday, Jan 27,2021 11:33:16
[DHCP IP: (192.168.1.3)] to MAC address 30:CD:A7:31:E6:AF, Wednesday, Jan 27,2021 11:33:15
[Internet disconnected] Wednesday, Jan 27,2021 11:33:15
[Initialized, firmware version: V1.0.4.106_10.0.80] Wednesday, Jan 27,2021 11:32:52
[DHCP IP: (192.168.1.7)] to MAC address B8:08:CF:82:99:11, Thursday, Jan 28,2021 09:00:49
[Time synchronized with NTP server] Thursday, Jan 28,2021 08:59:02
[Internet connected] IP address: 47.227.168.195, Thursday, Jan 28,2021 08:59:01
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [151.101.194.217], Thursday, Jan 28,2021 01:16:05
[DHCP IP: (192.168.1.3)] to MAC address 6A:33:DE:19:A1:58, Wednesday, Jan 27,2021 23:35:10
[DHCP IP: (192.168.1.4)] to MAC address 30:CD:A7:31:E6:AF, Wednesday, Jan 27,2021 23:33:25
[Time synchronized with NTP server] Wednesday, Jan 27,2021 23:33:18
[Internet connected] IP address: 47.227.168.195, Wednesday, Jan 27,2021 23:33:17
[DoS attack: Smurf] attack packets in last 20 sec from ip [104.44.28.255], Wednesday, Jan 27,2021 21:24:31
[DHCP IP: (192.168.1.12)] to MAC address E6:23:0A:33:43:48, Wednesday, Jan 27,2021 21:21:27
[DoS attack: Smurf] attack packets in last 20 sec from ip [192.168.1.6], Wednesday, Jan 27,2021 20:49:09
[DoS attack: Smurf] attack packets in last 20 sec from ip [192.168.1.6], Wednesday, Jan 27,2021 20:47:33
[DHCP IP: (192.168.1.6)] to MAC address 24:0A:64:AC:AF:75, Wednesday, Jan 27,2021 19:09:07
[DHCP IP: (192.168.1.6)] to MAC address 24:0A:64:AC:AF:75, Wednesday, Jan 27,2021 17:17:21
[DHCP IP: (192.168.1.6)] to MAC address 24:0A:64:AC:AF:75, Wednesday, Jan 27,2021 16:51:34
[DoS attack: Smurf] attack packets in last 20 sec from ip [110.137.100.255], Wednesday, Jan 27,2021 16:35:49
[DoS attack: Smurf] attack packets in last 20 sec from ip [110.137.100.255], Wednesday, Jan 27,2021 16:35:17
[DoS attack: Smurf] attack packets in last 20 sec from ip [182.185.100.255], Wednesday, Jan 27,2021 16:34:55
[DoS attack: Smurf] attack packets in last 20 sec from ip [182.185.100.255], Wednesday, Jan 27,2021 16:34:14
[DHCP IP: (192.168.1.6)] to MAC address 24:0A:64:AC:AF:75, Wednesday, Jan 27,2021 16:29:31
[DHCP IP: (192.168.1.6)] to MAC address 24:0A:64:AC:AF:75, Wednesday, Jan 27,2021 11:38:10
[DoS attack: Smurf] attack packets in last 20 sec from ip [47.227.168.195], Wednesday, Jan 27,2021 11:36:59
[DoS attack: Smurf] attack packets in last 20 sec from ip [47.227.168.195], Wednesday, Jan 27,2021 11:36:30
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [104.95.58.48], Wednesday, Jan 27,2021 11:36:07
[DoS attack: Smurf] attack packets in last 20 sec from ip [47.227.168.195], Wednesday, Jan 27,2021 11:36:01
[DoS attack: Smurf] attack packets in last 20 sec from ip [47.227.168.195], Wednesday, Jan 27,2021 11:35:33
[DoS attack: Smurf] attack packets in last 20 sec from ip [47.227.168.195], Wednesday, Jan 27,2021 11:35:04
[DHCP IP: (192.168.1.3)] to MAC address 6A:33:DE:19:A1:58, Wednesday, Jan 27,2021 11:34:57
[DHCP IP: (192.168.1.2)] to MAC address 6A:33:DE:19:A1:58, Wednesday, Jan 27,2021 11:34:31
[Admin login] from source 192.168.1.5, Wednesday, Jan 27,2021 11:34:04
[DHCP IP: (192.168.1.5)] to MAC address 28:7F:CF:B9:23:BE, Wednesday, Jan 27,2021 11:33:25
[DHCP IP: (192.168.1.4)] to MAC address 30:CD:A7:31:E6:AF, Wednesday, Jan 27,2021 11:33:22
[Time synchronized with NTP server] Wednesday, Jan 27,2021 11:33:16
[Internet connected] IP address: 47.227.168.195, Wednesday, Jan 27,2021 11:33:16
[DHCP IP: (192.168.1.3)] to MAC address 30:CD:A7:31:E6:AF, Wednesday, Jan 27,2021 11:33:15
[Internet disconnected] Wednesday, Jan 27,2021 11:33:15
[Initialized, firmware version: V1.0.4.106_10.0.80] Wednesday, Jan 27,2021 11:32:52
Thanks in advance,
Jeff
1 Reply
Hi B00bonic1969,
Good day!
Welcome to NETGEAR Community!
First of all, we do apologize for the inconvenience of not getting back to you immediately due to the backlog in the system. With this DDoS attacks on the logs, does it affect your internet connection? DId you check your modem if you are getting an issue with the internet? Have you tried downgrading the firmware?
Please do not hesitate to let me know if you need further assistance.Regards,
Oliver
Community Team
