possible syn flooding

[GBDJG]

Ive been recently loosing connection i system info i found this log.

Is this a ddos attack?

[Netduma Fraser]

It's a type of DDoS attack, a lone entry shouldn't be anything to worry about. You wouldn't be able to regain connection right away depending on the severity and there would be more lines - it works by overwhelming the router with traffic and doesn't look like that happened here. The DHCP lease changed at the exact same moment so it could have been that instead, giving the R2 and devices static/reserved IPs may help.

[GBDJG]

13 minutes ago, Netduma Fraser said:

It's a type of DDoS attack, a lone entry shouldn't be anything to worry about. You wouldn't be able to regain connection right away depending on the severity and there would be more lines - it works by overwhelming the router with traffic and doesn't look like that happened here. The DHCP lease changed at the exact same moment so it could have been that instead, giving the R2 and devices static/reserved IPs may help.

should i change DCHP lease time.

[Netduma Fraser]

Yeah change that to 168hrs which is the maximum and see if it happens less.

[GBDJG]

will do thank you.