NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
attach router r7000 r6250
1 Topic
! Suspicious activity- condensed Router log
Folks- newbie here..have a R6250 router running latest firmware...few wired devices and few mobile wifi devices using it. I noticed some suspicious remote LAN access records and the DoS attacks from my router log.. I've pasted only 6 lines below- only relevant ones (deleted others like DHCP logins from my family's mobile, or admin login etc.). This is only a 24 hours extract but its concerning as youll see below.. [DoS attack: ACK Scan] attack packets in last 20 sec from ip [206.124.114.91], Tuesday, Aug 01,2017 21:28:17 [DoS attack: ACK Scan] attack packets in last 20 sec from ip [63.251.98.12], Tuesday, Aug 01,2017 17:42:05 [DoS attack: ACK Scan] attack packets in last 20 sec from ip [63.251.98.12], Tuesday, Aug 01,2017 17:49:23 [DoS attack: FIN Scan] attack packets in last 20 sec from ip [63.251.98.12], Tuesday, Aug 01,2017 17:57:24 [LAN access from remote] from 59.96.115.105:58909 to 192.168.1.85:46495, Wednesday, Aug 02,2017 06:01:00 [LAN access from remote] from 69.248.XX.XXX to 192.168.1.78:58862, Wednesday, Aug 02,2017 06:14:27 Could someone pls. help and point me in right directions...(69.248.XX.XXX is my own public IP) specially about what this Remote LAN access is- did someone manage to access my home network from somewhere in India ?? (abt remote login, an IP locator site says IP 59.96.115.105:58909 is from Bangalore India BSNL and another one says Indore India BSNL...very confusing?)Solved