Discussion stats
  • 3 replies
  • 181 views
  • 0 kudos
  • 3 in conversation
Announcements

Top Contributors
Reply
Highlighted
Aspirant

Dos attack from RBR50 router

Hi
My route is filled with this stuff and it chrashes all the time
My setup is made of one RBR50 and two sattelites.
the system run stable for a few hours and suddently it goes down.
Firmware is 2.5.1.9
Any ideas
thx in advance
Christian

[DoS Attack: IP Spoofing] from source: 192.168.1.1, port 59805, Sunday, March 15, 2020 07:59:12
[DoS Attack: IP Spoofing] from source: 192.168.1.1, port 50442, Sunday, March 15, 2020 07:59:12
[DoS Attack: IP Spoofing] from source: 192.168.1.1, port 55388, Sunday, March 15, 2020 07:47:38
[DoS Attack: IP Spoofing] from source: 192.168.1.1, port 40079, Sunday, March 15, 2020 07:47:38
[DoS Attack: IP Spoofing] from source: 192.168.1.1, port 44559, Sunday, March 15, 2020 07:47:38
[DoS Attack: IP Spoofing] from source: 192.168.1.1, port 53158, Sunday, March 15, 2020 07:47:38
[DoS Attack: IP Spoofing] from source: 192.168.1.1, port 47168, Sunday, March 15, 2020 07:47:38
[DoS Attack: IP Spoofing] from source: 192.168.1.1, port 60194, Sunday, March 15, 2020 07:47:38
[DoS Attack: IP Spoofing] from source: 192.168.1.1, port 40044, Sunday, March 15, 2020 07:47:38
[DoS Attack: IP Spoofing] from source: 192.168.1.1, port 41892, Sunday, March 15, 2020 07:47:38

Model: RBR50|Orbi AC3000 Tri-band WiFi Router
Message 1 of 4
Highlighted
Master

Re: Dos attack from RBR50 router

Can you please describe the make and model of the modem the Orbie router is attached to?

Is the Orbi in "router" or Access Point (AP) mode?

I love my Orbi.
Message 2 of 4
Highlighted
Aspirant

Re: Dos attack from RBR50 router

Hi 
the Orbi router is connected to a Zyxel VMG3925-B10B router from my fiber provider and this Zyxel is put in "Bridge Mode"
The Orbi is in "Router" mode
Maybe you give me a hint to where the "problem" could be! When I was looking at hte back on the Zyxel I could see that it's default IP addresse is 192.168.1.1, and this I also has setup on the ORBI. Could this be the cause of my issue?
I will try to change this to something else.
I will also report back if this is fixing the issue.
/Christian

Message 3 of 4
Highlighted
Guru

Re: Dos attack from RBR50 router

Possible. The Orbi uses 192.168.1.1 as it's default, however if the RBR detects the same IP address on its' WAN port, the RBR should and will change it's own IP address to something else, usally a 10 IP address. 

However if the modem is fully  bridged, the .1.1 IP address should not be seen or used by the modem. Confirm the .1.1. IP address with the MAC address seen in the logs with the sticker on the modem. 


My Setup (Cable 900Mbps/50Mbps)>CAX80>RBK853 v3.1.15.32(Router Mode)
Additional NG HW: C7800/CM1100/CM1200, Orbi CBK40, RBK50, R7800, R7960P,
EX7500/EX7700, XR450 and WNHDE111
Message 4 of 4