RBR10 - Frequent Internet Loss - DoS Attack in Logs
I live in an apartment complex and don't know their network at all. Internet is distributed to everyone and not managed by ourselves with the exception of my Orbi. We have an ethernet line that we connect the Orbi to and that's it.
I've tried this on both a static and dynamic IP. It behaves the same. Internet drops at exact time of these events in the logs. It will stay out for a good while too depending on however long it wants to last. Wifi never drops.
Trying to figure out if this is an ISP issue.
Here are some logs:
[admin login] from source 10.0.0.2, Tuesday, August 17, 2021 20:34:31 [admin login] from source 10.0.0.5, Tuesday, August 17, 2021 20:29:56 [DoS Attack: ACK Scan] from source: 155.133.253.50, port 27032, Tuesday, August 17, 2021 20:12:19 [DoS Attack: ACK Scan] from source: 209.206.51.19, port 443, Tuesday, August 17, 2021 20:09:14 [DoS Attack: ACK Scan] from source: 142.250.69.238, port 443, Tuesday, August 17, 2021 20:06:20 [DoS Attack: ACK Scan] from source: 34.211.86.15, port 443, Tuesday, August 17, 2021 20:06:04 [DoS Attack: ACK Scan] from source: 52.208.159.117, port 443, Tuesday, August 17, 2021 20:05:53 [admin login] from source 10.0.0.5, Tuesday, August 17, 2021 20:05:50 [DoS Attack: ACK Scan] from source: 142.250.69.238, port 443, Tuesday, August 17, 2021 20:05:50 [DoS Attack: ACK Scan] from source: 52.208.159.117, port 443, Tuesday, August 17, 2021 20:05:45 [DoS Attack: ACK Scan] from source: 34.211.86.15, port 443, Tuesday, August 17, 2021 20:05:27 [DoS Attack: ACK Scan] from source: 142.250.69.238, port 443, Tuesday, August 17, 2021 20:05:20 [DoS Attack: Xmas Tress Scan] from source: 10.10.10.1, port 40415, Tuesday, August 17, 2021 19:49:19 [DoS Attack: ACK Scan] from source: 10.10.10.1, port 40414, Tuesday, August 17, 2021 19:49:19 [DoS Attack: Xmas Tress Scan] from source: 10.10.10.1, port 40415, Tuesday, August 17, 2021 19:49:19 [DoS Attack: ACK Scan] from source: 10.10.10.1, port 40414, Tuesday, August 17, 2021 19:49:19 [DoS Attack: Xmas Tress Scan] from source: 10.10.10.1, port 40415, Tuesday, August 17, 2021 19:49:19 [DoS Attack: ACK Scan] from source: 10.10.10.1, port 40414, Tuesday, August 17, 2021 19:49:19 [DoS Attack: Xmas Tress Scan] from source: 10.10.10.1, port 40415, Tuesday, August 17, 2021 19:49:19 [DoS Attack: ACK Scan] from source: 10.10.10.1, port 40414, Tuesday, August 17, 2021 19:49:19 [DoS Attack: Xmas Tress Scan] from source: 10.10.10.1, port 40415, Tuesday, August 17, 2021 19:49:18 [DoS Attack: ACK Scan] from source: 10.10.10.1, port 40414, Tuesday, August 17, 2021 19:49:18 [DoS Attack: Xmas Tress Scan] from source: 10.10.10.1, port 40415, Tuesday, August 17, 2021 19:49:18 [DoS Attack: ACK Scan] from source: 10.10.10.1, port 40414, Tuesday, August 17, 2021 19:49:18 [DoS Attack: Xmas Tress Scan] from source: 10.10.10.1, port 40415, Tuesday, August 17, 2021 19:49:17 [DoS Attack: ACK Scan] from source: 10.10.10.1, port 40414, Tuesday, August 17, 2021 19:49:17 [DoS Attack: Xmas Tress Scan] from source: 10.10.10.1, port 40415, Tuesday, August 17, 2021 19:49:17 [DoS Attack: ACK Scan] from source: 10.10.10.1, port 40414, Tuesday, August 17, 2021 19:49:17 [DoS Attack: ACK Scan] from source: 209.206.51.19, port 443, Tuesday, August 17, 2021 19:36:36 [Time synchronized with NTP server] Tuesday, August 17, 2021 19:30:51 [Internet connected] IP address: 10.10.8.38, Tuesday, August 17, 2021 19:30:35 [Internet disconnected] Tuesday, August 17, 2021 19:30:28 [Time synchronized with NTP server] Tuesday, August 17, 2021 19:29:19 [Internet connected] IP address: 10.10.8.38, Tuesday, August 17, 2021 19:29:15 [Internet disconnected] Tuesday, August 17, 2021 19:29:08 [admin login] from source 10.0.0.5, Tuesday, August 17, 2021 19:25:23 [admin login] from source 10.0.0.5, Tuesday, August 17, 2021 19:25:01 [admin login failure] from source 10.0.0.5, Tuesday, August 17, 2021 19:24:57 [admin login failure] from source 10.0.0.5, Tuesday, August 17, 2021 19:21:15 [Time synchronized with NTP server] Tuesday, August 17, 2021 19:20:24 [Internet connected] IP address: 10.10.15.30, Tuesday, August 17, 2021 19:20:20 [Initialized, firmware version: V2.7.3.22] Tuesday, August 17, 2021 19:07:40
