Reply

DoS Attack

MRowe
Guide

DoS Attack

Hi,

Should I worry about this:

[DoS Attack: SYN/ACK Scan] from source: 185.97.255.42, port 7778, Friday, February 15, 2019 11:03:56
DoS Attack: RST Scan] from source: 31.25.139.237, port 42779, Friday, February 15, 2019 11:02:27

[DoS Attack: ACK Scan] from source: 31.13.84.2, port 443, Friday, February 15, 2019 11:00:49

[DoS Attack: SYN/ACK Scan] from source: 185.97.255.42, port 7778, Friday, February 15, 2019 10:59:06

[DoS Attack: ACK Scan] from source: 31.13.84.2, port 443, Friday, February 15, 2019 10:58:46

[DoS Attack: ACK Scan] from source: 31.13.84.2, port 443, Friday, February 15, 2019 10:56:44

[DoS Attack: ACK Scan] from source: 31.13.84.2, port 443, Friday, February 15, 2019 10:54:41

[DoS Attack: ACK Scan] from source: 31.13.84.2, port 443, Friday, February 15, 2019 10:52:38

[DoS Attack: ACK Scan] from source: 31.13.84.2, port 443, Friday, February 15, 2019 10:50:35

 

Thanks

Model: XR500| Nighthawk Pro Gaming Router
Message 1 of 7

Accepted Solutions
FURRYe38
Guru

Re: DoS Attack

Use Domaintools.com whois feature to see what those IP addreses are coming from. Contact our ISP about changing the WAN IP address that the modem is passingthru and blocking.

It's just the router reporting what it's detecting and blocking. It's doing it's job.

My Setup (Cable 1Gbps/50Mbps)>CAX80 v2.1.2.1(LAG Disabled)>RBK853 v3.2.18.223/SRK30 V3.2.33.106)
Additional NG HW: C7800/CM1100/CM1200CM2000, Orbi CBK40, RBK50, R7800, R7960P, EX7500/EX7700, XR450(v2.3.2.120) and WNHDE111

View solution in original post

Message 3 of 7

All Replies
MRowe
Guide

Re: DoS Attack

To Be Continued

[DoS Attack: SYN/ACK Scan] from source: 138.94.200.255, port 39527, Friday, February 15, 2019 11:14:49

[DoS Attack: Ping Sweep] from source: 27.223.78.170, Friday, February 15, 2019 11:12:06

Message 2 of 7
FURRYe38
Guru

Re: DoS Attack

Use Domaintools.com whois feature to see what those IP addreses are coming from. Contact our ISP about changing the WAN IP address that the modem is passingthru and blocking.

It's just the router reporting what it's detecting and blocking. It's doing it's job.

My Setup (Cable 1Gbps/50Mbps)>CAX80 v2.1.2.1(LAG Disabled)>RBK853 v3.2.18.223/SRK30 V3.2.33.106)
Additional NG HW: C7800/CM1100/CM1200CM2000, Orbi CBK40, RBK50, R7800, R7960P, EX7500/EX7700, XR450(v2.3.2.120) and WNHDE111

View solution in original post

Message 3 of 7
MRowe
Guide

Re: DoS Attack

Thanks. I called ISP they said they can't do nothing with this, but you confirmed that at least my router is just doing its job. That's fine. Many thanks again.

Message 4 of 7
Netduma_Jack
NetDuma Partner

Re: DoS Attack

Often DoS attacks are just usual Internet white noise that your router is designed to block. So as your ISP advised, this is just a good sign that the router is doing its job.

Message 5 of 7
MRowe
Guide

Re: DoS Attack

Thanks!

Message 6 of 7
FURRYe38
Guru

Re: DoS Attack

Ok, Enjoy. Smiley Wink

My Setup (Cable 1Gbps/50Mbps)>CAX80 v2.1.2.1(LAG Disabled)>RBK853 v3.2.18.223/SRK30 V3.2.33.106)
Additional NG HW: C7800/CM1100/CM1200CM2000, Orbi CBK40, RBK50, R7800, R7960P, EX7500/EX7700, XR450(v2.3.2.120) and WNHDE111
Message 7 of 7
Discussion stats
  • 6 replies
  • 11813 views
  • 4 kudos
  • 3 in conversation
Announcements