so to start this off im a pretty paranoid person, and check these logs like crazy (even though ive seen that its really nothing/noise/etc)
I was checking the logs and noticed a lot coming from this specific IP.
[DoS Attack: RST Scan] from source: 47.89.242.116, [DoS Attack: RST Scan] from source: 47.89.242.116, [DoS Attack: RST Scan] from source: 47.88.57.97, port 443, Saturday, November 25, 2023 16:15:55 [DoS Attack: RST Scan] from source: 47.88.57.97, port 443, Saturday, November 25, 2023 16:15:54 [DoS Attack: RST Scan] from source: 47.88.57.97, port 443, Saturday, November 25, 2023 16:10:54 [DoS Attack: RST Scan] from source: 47.88.57.97, port 443, Saturday, November 25, 2023 16:10:54 [DoS Attack: RST Scan] from source: 47.89.242.116, port 443, Saturday, November 25, 2023 16:00:54 [DoS Attack: RST Scan] from source: 47.88.57.97, port 443, Saturday, November 25, 2023 16:00:54 [DoS Attack: RST Scan] from source: 47.88.57.97, port 443, Saturday, November 25, 2023 16:00:54 [DoS Attack: RST Scan] from source: 47.89.242.116, port 443, Saturday, November 25, 2023 16:00:54 [DoS Attack: RST Scan] from source: 47.88.57.97,
i do not understand or know this ip and why it would be showing up so much. i thought it may be connected with my ISP but when i asked them that doesnt seem to be the case. im a very paranoid nut, so i would really like some reassurance here. are whatever shows up in logs blocked by the router? and pls explain it to me like im 5
Search around. NETGEAR firmware is famous for generating false positives. 98% of all IPs you see in the logs are NOT attacking you. They are false positives. Some will even come from your own devices/local network and some from your ISP or legitimate companies like Google, Amazon, Apple, etc.
There is nothing to be paranoid about. I run since 2017 without DoS protection on router(because it's useless) and never had any issues.
Relax, no one is coming to break in in your network or do some other nasty things. If you're still concerend about an IP, look it up: https://iplocation.io/
