Repetitive DoS Attacks (ACK Scan, Fraggle Attack) on Nighthawk Router??
My router is the RAX20, wasn't listed in the model pull down menu
So, this is my first post in a thread like this, I've never had this issue before and honestly, wasn't aware it was happening until I checked my router logs, this is what I'm getting everyday.... Like it's starting to worry me. I would have a longer log but I reset the router as stated below,
[Admin login] from source 10.0.0.14, Friday, Jun 18,2021 04:42:50 [DHCP IP: (10.0.0.10)] to MAC address 32:0B:FD:99:1A:DB, Friday, Jun 18,2021 04:42:46 [DHCP IP: (10.0.0.14)] to MAC address EE:B8:A0:55:ED:C8, Friday, Jun 18,2021 04:42:07 [DoS attack: Fraggle Attack] from source 192.168.1.130,port 27036 Friday, Jun 18,2021 04:41:56 [DoS attack: Fraggle Attack] from source UNKNOWN,port 68 Friday, Jun 18,2021 04:41:55 [DHCP IP: (10.0.0.12)] to MAC address 2A:23:8D:40:B6:7A, Friday, Jun 18,2021 04:40:17 [DHCP IP: (10.0.0.10)] to MAC address 32:0B:FD:99:1A:DB, Friday, Jun 18,2021 04:39:40 [DHCP IP: (10.0.0.10)] to MAC address 32:0B:FD:99:1A:DB, Friday, Jun 18,2021 04:38:10 [DHCP IP: (10.0.0.13)] to MAC address 28:3A:4D:73:D6:D3, Friday, Jun 18,2021 04:37:38 [DHCP IP: (10.0.0.10)] to MAC address 32:0B:FD:99:1A:DB, Friday, Jun 18,2021 04:36:17 [DHCP IP: (10.0.0.10)] to MAC address 32:0B:FD:99:1A:DB, Friday, Jun 18,2021 04:29:44 [DHCP IP: (10.0.0.10)] to MAC address 32:0B:FD:99:1A:DB, Friday, Jun 18,2021 04:25:52 [DHCP IP: (10.0.0.12)] to MAC address 2A:23:8D:40:B6:7A, Friday, Jun 18,2021 04:23:55 [DHCP IP: (10.0.0.9)] to MAC address 1C:FE:2B:D2:5D:03, Friday, Jun 18,2021 04:22:36 [DHCP IP: (10.0.0.10)] to MAC address 32:0B:FD:99:1A:DB, Friday, Jun 18,2021 04:06:44 [DoS attack: RST Scan] from source 34.230.121.176,port 443 Friday, Jun 18,2021 03:42:23 [DHCP IP: (10.0.0.11)] to MAC address D0:55:09:A3:BE:02, Friday, Jun 18,2021 03:38:57 [DHCP IP: (10.0.0.10)] to MAC address 32:0B:FD:99:1A:DB, Friday, Jun 18,2021 03:29:54 [DHCP IP: (10.0.0.9)] to MAC address 1C:FE:2B:D2:5D:03, Friday, Jun 18,2021 03:19:42 [DoS attack: ACK Scan] from source 142.250.138.108,port 993 Friday, Jun 18,2021 03:18:01 [DoS attack: ACK Scan] from source 23.47.52.168,port 80 Friday, Jun 18,2021 03:12:52 [DoS attack: ACK Scan] from source 13.249.72.15,port 443 Friday, Jun 18,2021 03:10:54 [DoS attack: ACK Scan] from source 99.86.83.19,port 443 Friday, Jun 18,2021 03:10:45 [DoS attack: ACK Scan] from source 142.250.68.136,port 443 Friday, Jun 18,2021 03:10:42 [DoS attack: ACK Scan] from source 65.8.228.110,port 443 Friday, Jun 18,2021 03:10:37 [DoS attack: ACK Scan] from source 13.225.51.36,port 443 Friday, Jun 18,2021 03:10:37 [DoS attack: ACK Scan] from source 65.8.228.110,port 443 Friday, Jun 18,2021 03:10:36 [DoS attack: ACK Scan] from source 13.225.51.36,port 443 Friday, Jun 18,2021 03:10:36 [DoS attack: ACK Scan] from source 65.8.228.110,port 443 Friday, Jun 18,2021 03:10:35 [DoS attack: ACK Scan] from source 13.225.51.36,port 443 Friday, Jun 18,2021 03:10:35 [DoS attack: ACK Scan] from source 65.8.228.110,port 443 Friday, Jun 18,2021 03:10:32 [DoS attack: ACK Scan] from source 13.249.25.41,port 443 Friday, Jun 18,2021 03:10:32 [DoS attack: ACK Scan] from source 65.8.228.110,port 443 Friday, Jun 18,2021 03:10:26 [DoS attack: ACK Scan] from source 13.249.53.158,port 80 Friday, Jun 18,2021 03:10:25 [DoS attack: ACK Scan] from source 65.8.228.110,port 443 Friday, Jun 18,2021 03:10:25 [DoS attack: ACK Scan] from source 13.225.51.26,port 443 Friday, Jun 18,2021 03:10:24 [DoS attack: ACK Scan] from source 13.249.53.158,port 80 Friday, Jun 18,2021 03:10:24 [DoS attack: ACK Scan] from source 13.225.51.26,port 443 Friday, Jun 18,2021 03:10:23 [DHCP IP: (10.0.0.9)] to MAC address 1C:FE:2B:D2:5D:03, Friday, Jun 18,2021 03:10:02 [DoS attack: ACK Scan] from source 99.86.100.39,port 443 Friday, Jun 18,2021 03:09:59 [DHCP IP: (10.0.0.8)] to MAC address 0A:DD:72:79:1E:6D, Friday, Jun 18,2021 03:09:54 [DHCP IP: (10.0.0.3)] to MAC address 74:AB:93:46:32:32, Friday, Jun 18,2021 03:09:44 [DoS attack: ACK Scan] from source 52.94.228.85,port 443 Friday, Jun 18,2021 03:09:41 [Time synchronized with NTP server] Friday, Jun 18,2021 03:09:40 [Internet connected] IP address: 192.168.1.249, Friday, Jun 18,2021 03:09:39 [USB device attached] The USB storage device FreeAgent GoFlex (Seagate 500GB) is attached to the ro Friday, Jun 18,2021 03:09:26 [Internet disconnected] Friday, Jun 18,2021 03:09:24 [DHCP IP: (10.0.0.4)] to MAC address 10:59:32:0D:07:EA, Friday, Jun 18,2021 03:09:17 [DHCP IP: (10.0.0.7)] to MAC address A8:BB:50:4B:88:26, Friday, Jun 18,2021 03:09:17 [DHCP IP: (10.0.0.6)] to MAC address 14:DD:A9:BB:5E:DE, Friday, Jun 18,2021 03:09:14 [DHCP IP: (10.0.0.5)] to MAC address D4:91:0F:F7:43:88, Friday, Jun 18,2021 03:09:13 [DHCP IP: (10.0.0.3)] to MAC address 74:AB:93:46:32:32, Friday, Jun 18,2021 03:09:08 [Initialized, firmware version: V1.0.2.82_2.0.52] Friday, Jun 18,2021 03:09:05 [DHCP IP: (10.0.0.2)] to MAC address 54:E0:19:C8:1F:8C, Friday, Jun 18,2021 03:09:05
The Seagate drive is my external HDD i have connected to the USB 3.0 port on the router, I use it as a network drive for files. I tried resetting the router and modem and this is STILL happening, are these false positives? I am very much a beginner in the world of networking, I have a basic understanding of how the whole shabang works but this is beyond me, anyone know what the hell is going on with my router???? Am I good or do I need to like call my ISP or something? I have no clue for how long this has been going on, I noticed this when I logged into routerlogin.net last week, I've had the router for months before that and no issues whatsoever. None, the router is lighting fast almost always.
My routers firmware version is: V1.0.2.82_2.0.52
If it matters, I'm running Windows 10 Home on an Acer Nitro 5 and there are about 10-18 other devices connected to the router at any given time
