NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
tcarvin
Nov 13, 2020Aspirant
R7000 - Very frequent disconnects and Self2WAN ICMP type b Detected
Nighthawk R7000 Firmware Version V1.0.9.88_10.2.88 We have been having recent problems with the internet going up and down like a yoyo. I can see in the router logs lots of connections, and ...
tcarvin
Nov 13, 2020Aspirant
A brief update, I just saw this in the log now too:
[Time synchronized with NTP server] Friday, Nov 13,2020 13:07:09
[Internet connected] IP address: XX.XX.XX.XX, Friday, Nov 13,2020 13:07:09
[DoS attack: Smurf] (4) attack packets in last 20 sec from ip [XX.XX.XX.XX], Friday, Nov 13,2020 13:03:14
[DoS attack: Smurf] (5) attack packets in last 20 sec from ip [XX.XX.XX.XX], Friday, Nov 13,2020 13:02:21
[Time synchronized with NTP server] Friday, Nov 13,2020 13:02:09
[Internet connected] IP address: XX.XX.XX.XX, Friday, Nov 13,2020 13:02:08
And again, XX is my WAN IP.
tcarvin
Nov 13, 2020Aspirant
One last snippet, in addition to the "Smurf" attack, there is also a "FIN Scan" one. I don't know if these are related to the "Internet Connected" every 5 minutes or not.
[Time synchronized with NTP server] Friday, Nov 13,2020 13:26:59
[Internet connected] IP address: XX.XX.XX.XX, Friday, Nov 13,2020 13:26:58
[Admin login] from source 192.168.1.2, Friday, Nov 13,2020 13:26:44
[DHCP IP: (192.168.1.11)] to MAC address 98:01:A7:9A:E7:CB, Friday, Nov 13,2020 13:26:00
[Time synchronized with NTP server] Friday, Nov 13,2020 13:21:58
[Internet connected] IP address: XX.XX.XX.XX, Friday, Nov 13,2020 13:21:58
[DHCP IP: (192.168.1.10)] to MAC address 84:AB:1A:34:AB:C2, Friday, Nov 13,2020 13:19:40
[DHCP IP: (192.168.1.9)] to MAC address F6:C2:E4:B0:8A:F1, Friday, Nov 13,2020 13:19:29
[Time synchronized with NTP server] Friday, Nov 13,2020 13:17:46
[DoS attack: FIN Scan] (3) attack packets in last 20 sec from ip [13.225.198.114], Friday, Nov 13,2020 13:17:43
[Admin login] from source 192.168.1.2, Friday, Nov 13,2020 13:17:20
[Admin login] from source 192.168.1.2, Friday, Nov 13,2020 13:17:05
[DoS attack: FIN Scan] (1) attack packets in last 20 sec from ip [13.225.198.114], Friday, Nov 13,2020 13:17:02