raiderloki Posted October 25, 2018 Share Posted October 25, 2018 I am have been seeing ping spikes and even timeouts on my adsl with my xr500(latest firmware) after seeing the spikes i went to my log and it is simply full of what are reported as ddos attacks there are ack, syn/ack rst and icmp ping sweep and chargen. This being said I believe the router is mitigating what may be a ddos attack, however the ping spikes are ruining my gameplay and streaming(my only tv). I have copied and pasted in todays log, can you make sense of this? I have changed external ips and mac and even the router name, and disconnected every device with the exception of the machine i am viewing the router with, and even changed computers and reissued external ip/mac/router name from that machine with everything else disconnected, yet it persists. Any help would be appreciated. [DoS Attack: SYN/ACK Scan] from source: 151.80.136.92, port 9987, Thursday, October 25, 2018 13:51:46 [DoS Attack: Ping Sweep] from source: 203.178.148.19, Thursday, October 25, 2018 13:50:49 [DoS Attack: Ping Sweep] from source: 203.178.148.19, Thursday, October 25, 2018 13:50:48 [DoS Attack: Ping Sweep] from source: 203.178.148.19, Thursday, October 25, 2018 13:50:48 [DoS Attack: ACK Scan] from source: 17.249.188.10, port 5223, Thursday, October 25, 2018 13:50:37 [DoS Attack: ACK Scan] from source: 17.249.188.10, port 5223, Thursday, October 25, 2018 13:49:21 [DoS Attack: ACK Scan] from source: 17.249.188.10, port 5223, Thursday, October 25, 2018 13:48:06 [DoS Attack: Ping Sweep] from source: 65.123.202.139, Thursday, October 25, 2018 13:47:32 [DoS Attack: Ping Sweep] from source: 65.123.202.139, Thursday, October 25, 2018 13:47:14 [DoS Attack: ACK Scan] from source: 17.249.188.10, port 5223, Thursday, October 25, 2018 13:46:51 [DoS Attack: RST Scan] from source: 148.252.229.210, port 8743, Thursday, October 25, 2018 13:46:35 [DoS Attack: SYN/ACK Scan] from source: 54.37.93.140, port 80, Thursday, October 25, 2018 13:46:30 [DoS Attack: Ping Sweep] from source: 203.178.148.19, Thursday, October 25, 2018 13:45:37 [DoS Attack: ACK Scan] from source: 17.249.188.10, port 5223, Thursday, October 25, 2018 13:45:36 [DoS Attack: Ping Sweep] from source: 203.178.148.19, Thursday, October 25, 2018 13:45:19 [DoS Attack: ACK Scan] from source: 17.249.188.10, port 5223, Thursday, October 25, 2018 13:44:20 [DoS Attack: Ping Sweep] from source: 46.234.125.89, Thursday, October 25, 2018 13:42:51 [DoS Attack: Ping Sweep] from source: 65.123.202.139, Thursday, October 25, 2018 13:42:01 [DoS Attack: Ping Sweep] from source: 65.123.202.139, Thursday, October 25, 2018 13:42:01 [DoS Attack: Ping Sweep] from source: 46.234.125.89, Thursday, October 25, 2018 13:41:04 [DoS Attack: Ping Sweep] from source: 206.117.25.90, Thursday, October 25, 2018 13:40:50 [DoS Attack: Ping Sweep] from source: 206.117.25.90, Thursday, October 25, 2018 13:40:50 [DoS Attack: Ping Sweep] from source: 206.117.25.90, Thursday, October 25, 2018 13:40:50 [DoS Attack: TCP/UDP Echo] from source: 80.82.77.139, port 27221, Thursday, October 25, 2018 13:40:44 [DoS Attack: TCP/UDP Echo] from source: 80.82.77.139, port 27221, Thursday, October 25, 2018 13:40:44 [DoS Attack: TCP/UDP Echo] from source: 80.82.77.139, port 27221, Thursday, October 25, 2018 13:40:44 [DoS Attack: Ping Sweep] from source: 206.117.25.90, Thursday, October 25, 2018 13:40:38 [OpenVPN] VPN Client disconnected., Thursday, October 25, 2018 13:39:46 [DoS Attack: Ping Sweep] from source: 192.172.226.137, Thursday, October 25, 2018 13:37:56 [DoS Attack: SYN/ACK Scan] from source: 27.148.157.137, port 80, Thursday, October 25, 2018 13:37:53 [DoS Attack: SYN/ACK Scan] from source: 27.148.157.137, port 80, Thursday, October 25, 2018 13:37:53 [DoS Attack: SYN/ACK Scan] from source: 27.148.157.137, port 80, Thursday, October 25, 2018 13:37:53 [DoS Attack: Ping Sweep] from source: 192.172.226.141, Thursday, October 25, 2018 13:32:41 [DoS Attack: Ping Sweep] from source: 192.172.226.137, Thursday, October 25, 2018 13:28:01 [DoS Attack: Ping Sweep] from source: 79.170.25.234, Thursday, October 25, 2018 13:27:55 [DoS Attack: Ping Sweep] from source: 79.170.25.234, Thursday, October 25, 2018 13:27:55 [DoS Attack: Ping Sweep] from source: 79.170.25.234, Thursday, October 25, 2018 13:27:55 [DumaOS] R-App store cloud sync failed, Thursday, October 25, 2018 13:27:12 [DumaOS] HTTP download failed with code '404', Thursday, October 25, 2018 13:27:12 [DumaOS] Resync R-App store cloud, Thursday, October 25, 2018 13:27:12 [DumaOS] Cloudsync DPI result 'false','All mirrors are down', Thursday, October 25, 2018 13:27:07 [DoS Attack: Ping Sweep] from source: 14.170.236.204, Thursday, October 25, 2018 13:26:20 [DoS Attack: Ping Sweep] from source: 192.172.226.137, Thursday, October 25, 2018 13:17:56 [DoS Attack: ACK Scan] from source: 213.108.243.115, port 80, Thursday, October 25, 2018 13:17:33 [DoS Attack: ACK Scan] from source: 213.108.243.115, port 80, Thursday, October 25, 2018 13:17:33 [DoS Attack: ACK Scan] from source: 213.108.243.115, port 80, Thursday, October 25, 2018 13:17:33 [DoS Attack: RST Scan] from source: 17.248.142.20, port 443, Thursday, October 25, 2018 13:16:15 [DoS Attack: RST Scan] from source: 17.248.142.20, port 443, Thursday, October 25, 2018 13:16:15 [DoS Attack: RST Scan] from source: 17.248.142.20, port 443, Thursday, October 25, 2018 13:16:15 [DoS Attack: RST Scan] from source: 17.248.142.20, port 443, Thursday, October 25, 2018 13:16:15 [DoS Attack: SYN/ACK Scan] from source: 213.24.76.23, port 80, Thursday, October 25, 2018 13:16:04 [DoS Attack: SYN/ACK Scan] from source: 213.24.76.23, port 80, Thursday, October 25, 2018 13:15:50 [DumaOS] DHCP lease change., Thursday, October 25, 2018 13:14:55 [DumaOS] DHCP new event., Thursday, October 25, 2018 13:14:55 [DHCP IP: 192.168.1.5] to MAC address 3c:a0:67:b4:fe:3f, Thursday, October 25, 2018 13:14:55 [DumaOS] DHCP lease change., Thursday, October 25, 2018 13:14:49 [DumaOS] DHCP new event., Thursday, October 25, 2018 13:14:49 [DHCP IP: 192.168.1.9] to MAC address 20:68:9d:be:4f:e8, Thursday, October 25, 2018 13:14:49 [DoS Attack: Ping Sweep] from source: 65.123.202.139, Thursday, October 25, 2018 13:14:14 [DoS Attack: Ping Sweep] from source: 65.123.202.139, Thursday, October 25, 2018 13:14:14 [DoS Attack: Ping Sweep] from source: 65.123.202.139, Thursday, October 25, 2018 13:14:14 [DumaOS] DHCP lease change., Thursday, October 25, 2018 13:14:13 [DumaOS] DHCP new event., Thursday, October 25, 2018 13:14:13 [DHCP IP: 192.168.1.4] to MAC address 00:e0:53:31:16:e7, Thursday, October 25, 2018 13:14:13 [DumaOS] DHCP lease change., Thursday, October 25, 2018 13:14:12 [DumaOS] DHCP new event., Thursday, October 25, 2018 13:14:12 [DHCP IP: 192.168.1.2] to MAC address 00:d9:d1:24:de:ba, Thursday, October 25, 2018 13:14:12 [DoS Attack: Ping Sweep] from source: 192.172.226.141, Thursday, October 25, 2018 13:12:47 [DoS Attack: Ping Sweep] from source: 192.172.226.141, Thursday, October 25, 2018 13:12:47 [DoS Attack: Ping Sweep] from source: 94.181.40.243, Thursday, October 25, 2018 13:09:32 [DoS Attack: Ping Sweep] from source: 94.181.40.243, Thursday, October 25, 2018 13:09:32 [DoS Attack: Ping Sweep] from source: 94.181.40.243, Thursday, October 25, 2018 13:09:32 [DoS Attack: Ping Sweep] from source: 74.123.186.96, Thursday, October 25, 2018 13:03:59 [DoS Attack: Ping Sweep] from source: 74.123.186.96, Thursday, October 25, 2018 13:03:59 [DumaOS] DHCP lease change., Thursday, October 25, 2018 13:00:28 [DumaOS] DHCP new event., Thursday, October 25, 2018 13:00:28 [DHCP IP: 192.168.1.7] to MAC address c0:cc:f8:1d:82:17, Thursday, October 25, 2018 13:00:28 [DumaOS] DHCP lease change., Thursday, October 25, 2018 13:00:28 [DumaOS] DHCP new event., Thursday, October 25, 2018 13:00:28 [DHCP IP: 192.168.1.7] to MAC address c0:cc:f8:1d:82:17, Thursday, October 25, 2018 13:00:28 [DoS Attack: Ping Sweep] from source: 206.117.25.90, Thursday, October 25, 2018 12:56:59 [DoS Attack: Ping Sweep] from source: 203.178.148.19, Thursday, October 25, 2018 12:55:45 [DoS Attack: Ping Sweep] from source: 192.172.226.141, Thursday, October 25, 2018 12:54:08 [DoS Attack: Ping Sweep] from source: 192.172.226.141, Thursday, October 25, 2018 12:54:08 [DoS Attack: Ping Sweep] from source: 192.172.226.141, Thursday, October 25, 2018 12:54:08 [DoS Attack: Ping Sweep] from source: 203.178.148.19, Thursday, October 25, 2018 12:50:31 [DoS Attack: Ping Sweep] from source: 203.178.148.19, Thursday, October 25, 2018 12:50:31 [DoS Attack: Ping Sweep] from source: 203.178.148.19, Thursday, October 25, 2018 12:50:31 [DoS Attack: SYN/ACK Scan] from source: 50.62.231.1, port 80, Thursday, October 25, 2018 12:48:12 [DoS Attack: SYN/ACK Scan] from source: 50.62.231.1, port 80, Thursday, October 25, 2018 12:47:45 [DoS Attack: SYN/ACK Scan] from source: 50.62.231.1, port 80, Thursday, October 25, 2018 12:47:45 [DoS Attack: SYN/ACK Scan] from source: 50.62.231.1, port 80, Thursday, October 25, 2018 12:47:45 [DumaOS] DHCP lease change., Thursday, October 25, 2018 12:46:04 [DumaOS] DHCP new event., Thursday, October 25, 2018 12:46:04 [DHCP IP: 192.168.1.6] to MAC address 74:c2:46:39:75:24, Thursday, October 25, 2018 12:46:04 [DoS Attack: SYN/ACK Scan] from source: 50.62.231.1, port 80, Thursday, October 25, 2018 12:44:29 [DoS Attack: SYN/ACK Scan] from source: 50.62.231.1, port 80, Thursday, October 25, 2018 12:40:32 [DoS Attack: SYN/ACK Scan] from source: 27.148.157.137, port 80, Thursday, October 25, 2018 12:34:47 [DoS Attack: SYN/ACK Scan] from source: 27.148.157.137, port 80, Thursday, October 25, 2018 12:34:47 [DoS Attack: SYN/ACK Scan] from source: 27.148.157.137, port 80, Thursday, October 25, 2018 12:34:47 [DoS Attack: Ping Sweep] from source: 195.169.125.251, Thursday, October 25, 2018 12:26:33 [DoS Attack: Ping Sweep] from source: 195.169.125.251, Thursday, October 25, 2018 12:26:15 [DoS Attack: Ping Sweep] from source: 46.234.125.89, Thursday, October 25, 2018 12:21:50 [DoS Attack: Ping Sweep] from source: 46.234.125.89, Thursday, October 25, 2018 12:21:50 [DoS Attack: Ping Sweep] from source: 46.234.125.89, Thursday, October 25, 2018 12:21:50 [DoS Attack: ACK Scan] from source: 157.240.2.15, port 443, Thursday, October 25, 2018 12:14:55 [DoS Attack: SYN/ACK Scan] from source: 35.221.205.154, port 3389, Thursday, October 25, 2018 12:14:25 [DoS Attack: SYN/ACK Scan] from source: 35.221.205.154, port 3389, Thursday, October 25, 2018 12:14:25 [DoS Attack: SYN/ACK Scan] from source: 35.221.205.154, port 3389, Thursday, October 25, 2018 12:14:25 [DoS Attack: Ping Sweep] from source: 192.172.226.141, Thursday, October 25, 2018 12:14:17 [DoS Attack: ACK Scan] from source: 157.240.2.15, port 443, Thursday, October 25, 2018 12:12:52 [DoS Attack: ACK Scan] from source: 157.240.2.15, port 443, Thursday, October 25, 2018 12:10:49 [DoS Attack: SYN/ACK Scan] from source: 27.148.157.137, port 80, Thursday, October 25, 2018 12:10:35 [DoS Attack: ACK Scan] from source: 157.240.2.15, port 443, Thursday, October 25, 2018 12:08:46 [DoS Attack: RST Scan] from source: 200.58.101.200, port 80, Thursday, October 25, 2018 12:07:34 [DoS Attack: ACK Scan] from source: 157.240.2.15, port 443, Thursday, October 25, 2018 12:06:43 [DoS Attack: SYN/ACK Scan] from source: 35.221.205.154, port 3389, Thursday, October 25, 2018 12:05:18 [DoS Attack: ACK Scan] from source: 157.240.2.15, port 443, Thursday, October 25, 2018 12:04:41 [DoS Attack: Ping Sweep] from source: 192.172.226.141, Thursday, October 25, 2018 12:02:42 [DoS Attack: Ping Sweep] from source: 192.172.226.141, Thursday, October 25, 2018 12:02:42 [DoS Attack: ACK Scan] from source: 157.240.2.15, port 443, Thursday, October 25, 2018 12:02:38 [DoS Attack: ACK Scan] from source: 157.240.2.15, port 443, Thursday, October 25, 2018 12:01:28 [DoS Attack: Ping Sweep] from source: 195.251.255.69, Thursday, October 25, 2018 11:59:45 [DoS Attack: RST Scan] from source: 200.58.101.200, port 80, Thursday, October 25, 2018 11:58:17 [DoS Attack: SYN/ACK Scan] from source: 185.27.134.126, port 80, Thursday, October 25, 2018 11:54:45 [DoS Attack: Ping Sweep] from source: 195.169.125.251, Thursday, October 25, 2018 11:53:18 [DoS Attack: Ping Sweep] from source: 195.169.125.251, Thursday, October 25, 2018 11:53:18 [DoS Attack: Ping Sweep] from source: 195.169.125.251, Thursday, October 25, 2018 11:53:18 [DoS Attack: RST Scan] from source: 66.201.105.130, port 80, Thursday, October 25, 2018 11:47:42 [DoS Attack: SYN/ACK Scan] from source: 27.148.157.137, port 80, Thursday, October 25, 2018 11:47:29 [DoS Attack: SYN/ACK Scan] from source: 158.69.141.74, port 35555, Thursday, October 25, 2018 11:45:17 [DoS Attack: Ping Sweep] from source: 192.172.226.141, Thursday, October 25, 2018 11:44:04 [DoS Attack: Ping Sweep] from source: 223.93.165.11, Thursday, October 25, 2018 11:39:43 [DumaOS] DHCP lease change., Thursday, October 25, 2018 11:37:54 [DumaOS] DHCP new event., Thursday, October 25, 2018 11:37:54 [DHCP IP: 192.168.1.7] to MAC address c0:cc:f8:1d:82:17, Thursday, October 25, 2018 11:37:54 [DoS Attack: Ping Sweep] from source: 195.169.125.251, Thursday, October 25, 2018 11:31:24 [DoS Attack: SYN/ACK Scan] from source: 27.148.157.137, port 80, Thursday, October 25, 2018 11:29:00 [DoS Attack: SYN/ACK Scan] from source: 27.148.157.137, port 80, Thursday, October 25, 2018 11:28:30 [DoS Attack: SYN/ACK Scan] from source: 27.148.157.137, port 80, Thursday, October 25, 2018 11:28:30 [DoS Attack: SYN/ACK Scan] from source: 27.148.157.137, port 80, Thursday, October 25, 2018 11:28:30 [DoS Attack: SYN/ACK Scan] from source: 42.236.35.134, port 80, Thursday, October 25, 2018 11:27:19 [DoS Attack: SYN/ACK Scan] from source: 124.238.245.223, port 80, Thursday, October 25, 2018 11:27:15 [DoS Attack: SYN/ACK Scan] from source: 123.6.11.153, port 80, Thursday, October 25, 2018 11:27:06 [DoS Attack: SYN/ACK Scan] from source: 58.30.206.149, port 80, Thursday, October 25, 2018 11:27:01 [DoS Attack: SYN/ACK Scan] from source: 58.30.206.149, port 80, Thursday, October 25, 2018 11:27:01 [DoS Attack: SYN/ACK Scan] from source: 58.30.206.149, port 80, Thursday, October 25, 2018 11:27:01 [DoS Attack: SYN/ACK Scan] from source: 124.238.245.223, port 80, Thursday, October 25, 2018 11:26:55 [DoS Attack: SYN/ACK Scan] from source: 124.232.158.229, port 80, Thursday, October 25, 2018 11:26:50 [DoS Attack: SYN/ACK Scan] from source: 219.151.19.160, port 80, Thursday, October 25, 2018 11:26:49 [DoS Attack: SYN/ACK Scan] from source: 219.151.19.160, port 80, Thursday, October 25, 2018 11:26:49 [DoS Attack: SYN/ACK Scan] from source: 219.151.19.160, port 80, Thursday, October 25, 2018 11:26:49 [DoS Attack: SYN/ACK Scan] from source: 116.211.152.234, port 80, Thursday, October 25, 2018 11:26:48 [DoS Attack: SYN/ACK Scan] from source: 116.211.152.234, port 80, Thursday, October 25, 2018 11:26:48 [DoS Attack: SYN/ACK Scan] from source: 116.211.152.234, port 80, Thursday, October 25, 2018 11:26:48 [DoS Attack: SYN/ACK Scan] from source: 110.157.248.229, port 80, Thursday, October 25, 2018 11:26:46 [DoS Attack: SYN/ACK Scan] from source: 121.9.246.108, port 80, Thursday, October 25, 2018 11:26:40 [DoS Attack: SYN/ACK Scan] from source: 42.236.35.141, port 80, Thursday, October 25, 2018 11:26:37 [DoS Attack: SYN/ACK Scan] from source: 42.236.35.141, port 80, Thursday, October 25, 2018 11:26:37 [DoS Attack: SYN/ACK Scan] from source: 42.236.35.141, port 80, Thursday, October 25, 2018 11:26:37 [DoS Attack: SYN/ACK Scan] from source: 1.199.92.83, port 80, Thursday, October 25, 2018 11:26:34 [DoS Attack: SYN/ACK Scan] from source: 1.199.92.85, port 80, Thursday, October 25, 2018 11:26:11 [DoS Attack: TCP/UDP Chargen] from source: 80.82.77.33, port 31743, Thursday, October 25, 2018 11:26:03 [DoS Attack: SYN/ACK Scan] from source: 123.6.11.156, port 80, Thursday, October 25, 2018 11:25:54 [DoS Attack: SYN/ACK Scan] from source: 113.207.42.36, port 80, Thursday, October 25, 2018 11:25:54 [DoS Attack: SYN/ACK Scan] from source: 123.6.11.156, port 80, Thursday, October 25, 2018 11:25:54 [DoS Attack: SYN/ACK Scan] from source: 113.207.42.36, port 80, Thursday, October 25, 2018 11:25:54 [DoS Attack: SYN/ACK Scan] from source: 123.6.11.156, port 80, Thursday, October 25, 2018 11:25:54 [DoS Attack: SYN/ACK Scan] from source: 58.205.221.236, port 80, Thursday, October 25, 2018 11:25:54 [DoS Attack: SYN/ACK Scan] from source: 58.205.221.236, port 80, Thursday, October 25, 2018 11:25:54 [DoS Attack: SYN/ACK Scan] from source: 58.205.221.236, port 80, Thursday, October 25, 2018 11:25:54 [DoS Attack: SYN/ACK Scan] from source: 113.207.42.37, port 80, Thursday, October 25, 2018 11:25:54 [DoS Attack: SYN/ACK Scan] from source: 121.9.246.108, port 80, Thursday, October 25, 2018 11:25:46 [DoS Attack: SYN/ACK Scan] from source: 124.160.141.107, port 80, Thursday, October 25, 2018 11:25:46 [DoS Attack: SYN/ACK Scan] from source: 124.160.141.107, port 80, Thursday, October 25, 2018 11:25:46 [DoS Attack: SYN/ACK Scan] from source: 124.160.141.107, port 80, Thursday, October 25, 2018 11:25:46 [DoS Attack: SYN/ACK Scan] from source: 121.9.246.108, port 80, Thursday, October 25, 2018 11:25:43 [DoS Attack: SYN/ACK Scan] from source: 121.9.246.108, port 80, Thursday, October 25, 2018 11:25:41 [DoS Attack: SYN/ACK Scan] from source: 116.211.152.237, port 80, Thursday, October 25, 2018 11:25:28 [DoS Attack: SYN/ACK Scan] from source: 113.207.42.36, port 80, Thursday, October 25, 2018 11:25:22 [DoS Attack: SYN/ACK Scan] from source: 113.207.42.37, port 80, Thursday, October 25, 2018 11:25:18 [DoS Attack: SYN/ACK Scan] from source: 119.147.156.230, port 80, Thursday, October 25, 2018 11:25:07 [DoS Attack: SYN/ACK Scan] from source: 113.207.42.39, port 80, Thursday, October 25, 2018 11:24:46 [DoS Attack: SYN/ACK Scan] from source: 113.207.42.39, port 80, Thursday, October 25, 2018 11:24:46 [DoS Attack: SYN/ACK Scan] from source: 113.207.42.39, port 80, Thursday, October 25, 2018 11:24:46 [DoS Attack: SYN/ACK Scan] from source: 116.211.152.237, port 80, Thursday, October 25, 2018 11:24:40 [DoS Attack: SYN/ACK Scan] from source: 60.223.222.222, port 80, Thursday, October 25, 2018 11:24:18 [DoS Attack: SYN/ACK Scan] from source: 43.224.184.220, port 80, Thursday, October 25, 2018 11:24:14 [DoS Attack: SYN/ACK Scan] from source: 42.236.35.134, port 80, Thursday, October 25, 2018 11:24:09 [DoS Attack: SYN/ACK Scan] from source: 1.199.92.83, port 80, Thursday, October 25, 2018 11:24:09 [DoS Attack: SYN/ACK Scan] from source: 42.236.35.134, port 80, Thursday, October 25, 2018 11:24:04 [DoS Attack: SYN/ACK Scan] from source: 123.6.11.160, port 80, Thursday, October 25, 2018 11:23:54 [DoS Attack: SYN/ACK Scan] from source: 110.157.248.229, port 80, Thursday, October 25, 2018 11:23:50 [DoS Attack: SYN/ACK Scan] from source: 116.211.152.239, port 80, Thursday, October 25, 2018 11:23:50 [DoS Attack: SYN/ACK Scan] from source: 124.232.158.233, port 80, Thursday, October 25, 2018 11:23:50 [DoS Attack: SYN/ACK Scan] from source: 39.106.237.113, port 80, Thursday, October 25, 2018 11:23:49 [DoS Attack: SYN/ACK Scan] from source: 124.238.245.222, port 80, Thursday, October 25, 2018 11:23:49 [DoS Attack: SYN/ACK Scan] from source: 43.224.184.220, port 80, Thursday, October 25, 2018 11:23:49 [DoS Attack: SYN/ACK Scan] from source: 113.207.42.39, port 80, Thursday, October 25, 2018 11:23:47 [DoS Attack: SYN/ACK Scan] from source: 113.207.42.39, port 80, Thursday, October 25, 2018 11:23:47 [DoS Attack: SYN/ACK Scan] from source: 113.207.42.39, port 80, Thursday, October 25, 2018 11:23:47 [DoS Attack: SYN/ACK Scan] from source: 219.151.19.160, port 80, Thursday, October 25, 2018 11:23:44 [DoS Attack: SYN/ACK Scan] from source: 43.224.184.220, port 80, Thursday, October 25, 2018 11:23:41 [DoS Attack: SYN/ACK Scan] from source: 119.147.156.230, port 80, Thursday, October 25, 2018 11:23:34 [DoS Attack: SYN/ACK Scan] from source: 219.151.19.157, port 80, Thursday, October 25, 2018 11:23:33 [DoS Attack: SYN/ACK Scan] from source: 219.151.19.157, port 80, Thursday, October 25, 2018 11:23:33 [DoS Attack: SYN/ACK Scan] from source: 219.151.19.157, port 80, Thursday, October 25, 2018 11:23:33 [DoS Attack: SYN/ACK Scan] from source: 1.199.92.88, port 80, Thursday, October 25, 2018 11:23:29 [DoS Attack: SYN/ACK Scan] from source: 1.199.92.88, port 80, Thursday, October 25, 2018 11:23:29 [DoS Attack: SYN/ACK Scan] from source: 1.199.92.88, port 80, Thursday, October 25, 2018 11:23:29 [DoS Attack: SYN/ACK Scan] from source: 42.236.35.140, port 80, Thursday, October 25, 2018 11:23:29 [DoS Attack: SYN/ACK Scan] from source: 42.236.35.140, port 80, Thursday, October 25, 2018 11:23:29 [DoS Attack: SYN/ACK Scan] from source: 42.236.35.140, port 80, Thursday, October 25, 2018 11:23:29 [DoS Attack: SYN/ACK Scan] from source: 119.84.134.214, port 80, Thursday, October 25, 2018 11:23:27 [DoS Attack: SYN/ACK Scan] from source: 119.84.134.214, port 80, Thursday, October 25, 2018 11:23:27 [DoS Attack: SYN/ACK Scan] from source: 119.84.134.214, port 80, Thursday, October 25, 2018 11:23:27 [DoS Attack: SYN/ACK Scan] from source: 116.211.152.234, port 80, Thursday, October 25, 2018 11:23:25 [DoS Attack: SYN/ACK Scan] from source: 60.223.222.222, port 80, Thursday, October 25, 2018 11:23:17 [DoS Attack: SYN/ACK Scan] from source: 116.211.152.234, port 80, Thursday, October 25, 2018 11:23:16 [DoS Attack: SYN/ACK Scan] from source: 113.207.42.37, port 80, Thursday, October 25, 2018 11:23:15 [DoS Attack: SYN/ACK Scan] from source: 42.236.35.134, port 80, Thursday, October 25, 2018 11:23:13 [DoS Attack: SYN/ACK Scan] from source: 39.106.237.108, port 80, Thursday, October 25, 2018 11:23:07 [DoS Attack: SYN/ACK Scan] from source: 113.207.42.39, port 80, Thursday, October 25, 2018 11:23:07 [DoS Attack: SYN/ACK Scan] from source: 124.232.158.230, port 80, Thursday, October 25, 2018 11:23:07 [DoS Attack: SYN/ACK Scan] from source: 124.160.141.106, port 80, Thursday, October 25, 2018 11:23:06 [DoS Attack: SYN/ACK Scan] from source: 180.149.155.32, port 80, Thursday, October 25, 2018 11:23:06 [DoS Attack: SYN/ACK Scan] from source: 113.207.42.37, port 80, Thursday, October 25, 2018 11:23:06 [DoS Attack: SYN/ACK Scan] from source: 219.151.19.157, port 80, Thursday, October 25, 2018 11:23:05 [DoS Attack: SYN/ACK Scan] from source: 124.232.158.233, port 80, Thursday, October 25, 2018 11:23:05 [DoS Attack: SYN/ACK Scan] from source: 42.236.35.134, port 80, Thursday, October 25, 2018 11:23:05 [DoS Attack: SYN/ACK Scan] from source: 42.236.35.141, port 80, Thursday, October 25, 2018 11:23:05 [DoS Attack: SYN/ACK Scan] from source: 122.72.89.231, port 80, Thursday, October 25, 2018 11:23:00 [DoS Attack: SYN/ACK Scan] from source: 116.211.152.234, port 80, Thursday, October 25, 2018 11:23:00 [DoS Attack: SYN/ACK Scan] from source: 122.72.89.208, port 80, Thursday, October 25, 2018 11:22:59 [DoS Attack: SYN/ACK Scan] from source: 124.232.158.229, port 80, Thursday, October 25, 2018 11:22:59 [DoS Attack: SYN/ACK Scan] from source: 1.199.92.86, port 80, Thursday, October 25, 2018 11:22:59 [DoS Attack: SYN/ACK Scan] from source: 124.160.141.107, port 80, Thursday, October 25, 2018 11:22:59 [DoS Attack: SYN/ACK Scan] from source: 42.236.35.138, port 80, Thursday, October 25, 2018 11:22:58 [DoS Attack: SYN/ACK Scan] from source: 121.9.246.111, port 80, Thursday, October 25, 2018 11:22:56 [DoS Attack: SYN/ACK Scan] from source: 116.211.152.234, port 80, Thursday, October 25, 2018 11:22:50 [DoS Attack: SYN/ACK Scan] from source: 121.9.246.111, port 80, Thursday, October 25, 2018 11:22:49 [DoS Attack: SYN/ACK Scan] from source: 121.9.246.111, port 80, Thursday, October 25, 2018 11:22:49 [DoS Attack: SYN/ACK Scan] from source: 121.9.246.111, port 80, Thursday, October 25, 2018 11:22:49 [DoS Attack: SYN/ACK Scan] from source: 219.151.19.157, port 80, Thursday, October 25, 2018 11:22:48 [DoS Attack: SYN/ACK Scan] from source: 1.199.92.86, port 80, Thursday, October 25, 2018 11:22:45 [DoS Attack: SYN/ACK Scan] from source: 116.211.152.234, port 80, Thursday, October 25, 2018 11:22:42 [DoS Attack: SYN/ACK Scan] from source: 125.74.3.118, port 80, Thursday, October 25, 2018 11:22:26 [DoS Attack: SYN/ACK Scan] from source: 119.147.156.230, port 80, Thursday, October 25, 2018 11:22:23 [DoS Attack: SYN/ACK Scan] from source: 119.147.156.230, port 80, Thursday, October 25, 2018 11:22:23 [DoS Attack: SYN/ACK Scan] from source: 119.147.156.230, port 80, Thursday, October 25, 2018 11:22:22 [DoS Attack: SYN/ACK Scan] from source: 42.236.35.141, port 80, Thursday, October 25, 2018 11:22:06 [DoS Attack: SYN/ACK Scan] from source: 218.8.164.213, port 80, Thursday, October 25, 2018 11:22:05 [DoS Attack: SYN/ACK Scan] from source: 218.8.164.213, port 80, Thursday, October 25, 2018 11:22:05 [DoS Attack: SYN/ACK Scan] from source: 218.8.164.213, port 80, Thursday, October 25, 2018 11:22:05 [DoS Attack: SYN/ACK Scan] from source: 58.205.221.236, port 80, Thursday, October 25, 2018 11:21:53 [DoS Attack: SYN/ACK Scan] from source: 42.236.35.141, port 80, Thursday, October 25, 2018 11:21:52 Link to comment Share on other sites More sharing options...
pollutionblues Posted October 25, 2018 Share Posted October 25, 2018 The logs are perfectly normal. I have copy & pasted an explanation from @Netduma Jack on this in a previous thread. ‘Those logs are for developers to look over in specific situations. Every XR500 router will display these types of logs (which look like DoS attacks). In reality, this is your router doing its job - it has a built in firewall and is displaying the prevention of such attacks. Every router in the world would show these kinds of events if they too had log files like the XR500. Most routers don't show you this information for this reason - it can be misinterpreted’ Link to comment Share on other sites More sharing options...
raiderloki Posted October 25, 2018 Author Share Posted October 25, 2018 I understand that these may be false positives, but it does not explain the ping spikes that started at the same time as the logs entries. Link to comment Share on other sites More sharing options...
Administrators Netduma Admin Posted October 25, 2018 Administrators Share Posted October 25, 2018 I think the cause of this is separate. Could you follow this PingPlotter guide please, it will help us to see what is going on with your line: http://forum.netduma.com/topic/23881-ping-plotter-quick-guide/ Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.