This topic has been marked solved and closed to new posts due to inactivity. We hope you'll join the conversation by posting to an open topic or starting a new one.
Folks- newbie here..have a R6250 router running latest firmware...few wired devices and few mobile wifi devices using it.
I noticed some suspicious remote LAN access records and the DoS attacks from my router log.. I've pasted only 6 lines below- only relevant ones (deleted others like DHCP logins from my family's mobile, or admin login etc.). This is only a 24 hours extract but its concerning as youll see below..
[DoS attack: ACK Scan] attack packets in last 20 sec from ip [206.124.114.91], Tuesday, Aug 01,2017 21:28:17
[DoS attack: ACK Scan] attack packets in last 20 sec from ip [63.251.98.12], Tuesday, Aug 01,2017 17:42:05
[DoS attack: ACK Scan] attack packets in last 20 sec from ip [63.251.98.12], Tuesday, Aug 01,2017 17:49:23
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [63.251.98.12], Tuesday, Aug 01,2017 17:57:24
[LAN access from remote] from 59.96.115.105:58909 to 192.168.1.85:46495, Wednesday, Aug 02,2017 06:01:00
[LAN access from remote] from 69.248.XX.XXX to 192.168.1.78:58862, Wednesday, Aug 02,2017 06:14:27
Could someone pls. help and point me in right directions...(69.248.XX.XXX is my own public IP) specially about what this Remote LAN access is- did someone manage to access my home network from somewhere in India ?? (abt remote login, an IP locator site says IP 59.96.115.105:58909 is from Bangalore India BSNL and another one says Indore India BSNL...very confusing?)
These logs indicate that the packet/traffic has been dropped by the router. Unless you are experiencing a drastic slow down of the Internet speed, this is normal.
These logs indicate that the packet/traffic has been dropped by the router. Unless you are experiencing a drastic slow down of the Internet speed, this is normal.
