Reply

RAX48 - DoS attack: Fraggle Attack port 67

flagrant992
Aspirant

RAX48 - DoS attack: Fraggle Attack port 67

In my router log I see  LOTS and LOT of

[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 from 96.120.120.89. 

 

Port 67 is mostly used for DHCP from what I've read. 

I am on Comcast and 96.120.120.89 is a comcast server according to whois.

https://whois.domaintools.com/96.120.120.89

 

My public IP is not on this subnet though.

From reading other posts I am not sure if this IP in the log is even legit?

Is there a way to tell for sure where this traffic is really coming from?

 

Is there a way to make this stop? I mean the log is pretty useless with the amount of lines from this one server. 

Can the router just bounce anything from 96.120.120.89 and ignore it and stop logging it to the log?

I mean great it's stopping this guy at 96.120.120.89, but now my log is full of non stop chatter from 96.120.120.89.

 

 

[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:22:11
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:21:59
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:21:08
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:20:53
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:20:41
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:19:58
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:19:42
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:19:32
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:18:49
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:18:33
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:18:21
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:17:34
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:17:18
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:17:08
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:16:18
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:16:03
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:15:52
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:15:01
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:14:46
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:14:35
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:13:51
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:13:35
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:13:24
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:12:39
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:12:23
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:12:12
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:11:14
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:10:58
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:10:47
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:09:39
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:09:23
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:09:13
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:08:25
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:08:10
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:07:59
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:07:09
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:06:54
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:06:43
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:05:42
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:05:26
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:05:14
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:04:27
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:04:12
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:04:01
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:03:32
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:03:15
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:03:00
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:02:48
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:02:04
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:01:48
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:01:37
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:00:38
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:00:22
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 05:00:11
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:59:29
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:59:13
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:59:02
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:58:17
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:58:01
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:57:50
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:57:02
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:56:47
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:56:37
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:55:46
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:55:30
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:55:20
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:54:34
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:54:19
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:54:09
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:53:15
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:52:59
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:52:49
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:52:05
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:51:50
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:51:38
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:50:26
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:50:10
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:50:00
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:49:17
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:49:01
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:48:51
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:48:04
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:47:48
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:47:36
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:46:49
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:46:34
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:46:23
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:45:31
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:45:16
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:45:05
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:44:21
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:44:06
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:43:56
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:43:15
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:43:00
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:42:49
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:42:10
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:41:55
[DoS attack: Fraggle Attack] from source 96.120.120.89,port 67 Monday, Nov 30,2020 04:41:44

Message 1 of 3
Christian_R
NETGEAR Employee Retired

Re: RAX48 - DoS attack: Fraggle Attack port 67

Hello flagrant992, 

 

This maybe a false positive. You may reach out to our support team for further investigation or details regarding the logs. 

 

http://www.netgear.com/support/contact.aspx

 

Christian 

Message 2 of 3
flagrant992
Aspirant

Re: RAX48 - DoS attack: Fraggle Attack port 67

Under Advanced, Logs, I unchecked Known DoS attacks and Port Scans so I stop getting this noise. 

 

I reported this to comcast and they ignored me and that IP is coming from a comcast server.

 

I get stuff from other servers as well, but what can I do about it anyway?

 

There is no way any of these are DoS attacks. Coming every now and then is not going to cause a Denial Of Service. Surprised the router can't figure this out. 

 

If it's a port scan who cares?

I assume the fact that these events are logged simply means the responses were discarded, which means no danger. 

 

 

 

 

 

 

Message 3 of 3
Top Contributors
Discussion stats
  • 2 replies
  • 941 views
  • 0 kudos
  • 2 in conversation
Announcements

Orbi WiFi 6E