TPG Community

Get online support

Internet keeps going down - Router showing constant DoS attacks

Allicit
Level 2

My internet has been great for so long but in the last few days I have been having untold issues with the connection. Technicians have replaced the HFC box, cables and have tested the line. Still it keeps going down. I have by chance just logged into my Orbi router log files and a see a huge number of constant DoS attacks. What can I do and am i being targeted for exploit? Is this the cause of my connection continually going down. I have to reset the router quite often now to get internet back. I was having some issues too with the actual service where it wouldn't negotiate a connection from the modem and the HFC box kept resetting too.

 

login] from source 192.168.1.9, Saturday, September 30, 2023 16:37:04
[DoS Attack: ACK Scan] from source: 185.224.128.184, port 8983, Saturday, September 30, 2023 12:30:59
[DoS Attack: TCP/UDP Chargen] from source: 45.156.128.30, port 34751, Saturday, September 30, 2023 11:08:08
[DoS Attack: WinNuke Attack] from source: 59.149.106.163, port 38818, Saturday, September 30, 2023 11:08:05
[DoS Attack: TCP/UDP Echo] from source: 45.156.128.30, port 56801, Saturday, September 30, 2023 11:05:13
[DoS Attack: WinNuke Attack] from source: 122.116.106.142, port 9561, Saturday, September 30, 2023 11:01:22
[DoS Attack: ACK Scan] from source: 195.85.201.201, port 30120, Saturday, September 30, 2023 10:47:44
[DoS Attack: SYN/ACK Scan] from source: 222.211.73.223, port 80, Saturday, September 30, 2023 10:37:54
[DoS Attack: SYN/ACK Scan] from source: 184.168.118.91, port 21, Saturday, September 30, 2023 10:35:33
[DoS Attack: WinNuke Attack] from source: 82.23.10.55, port 1554, Saturday, September 30, 2023 10:34:51
[DoS Attack: WinNuke Attack] from source: 80.212.65.68, port 31978, Saturday, September 30, 2023 10:24:49
[DoS Attack: NULL Scan] from source: 87.236.30.22, port 1569, Saturday, September 30, 2023 10:15:59
[DoS Attack: ACK Scan] from source: 195.85.201.201, port 30120, Saturday, September 30, 2023 10:05:40
[DoS Attack: TCP/UDP Chargen] from source: 146.88.241.70, port 49294, Saturday, September 30, 2023 10:04:41
[DoS Attack: ACK Scan] from source: 165.22.243.218, port 59803, Saturday, September 30, 2023 09:39:44
[DoS Attack: WinNuke Attack] from source: 222.225.60.70, port 18386, Saturday, September 30, 2023 09:19:03
[DoS Attack: NULL Scan] from source: 188.173.45.237, port 36017, Saturday, September 30, 2023 09:09:53
[DoS Attack: SYN/ACK Scan] from source: 184.168.124.125, port 443, Saturday, September 30, 2023 08:43:28
[DoS Attack: ACK Scan] from source: 185.224.128.184, port 10831, Saturday, September 30, 2023 08:33:55
[DoS Attack: WinNuke Attack] from source: 222.225.60.70, port 24527, Saturday, September 30, 2023 08:18:37
[DoS Attack: SYN/ACK Scan] from source: 40.70.161.102, port 443, Saturday, September 30, 2023 08:13:48
[DoS Attack: WinNuke Attack] from source: 46.121.236.232, port 52659, Saturday, September 30, 2023 08:13:15
[DoS Attack: WinNuke Attack] from source: 46.121.236.232, port 11986, Saturday, September 30, 2023 08:06:02
[DoS Attack: WinNuke Attack] from source: 59.149.106.163, port 20635, Saturday, September 30, 2023 07:57:59
[DoS Attack: WinNuke Attack] from source: 59.149.106.163, port 669, Saturday, September 30, 2023 07:50:18
[DoS Attack: WinNuke Attack] from source: 94.187.233.193, port 30019, Saturday, September 30, 2023 07:45:05
[DoS Attack: SYN/ACK Scan] from source: 222.211.73.223, port 80, Saturday, September 30, 2023 07:31:35
[DoS Attack: WinNuke Attack] from source: 222.225.60.70, port 47601, Saturday, September 30, 2023 07:15:57
[DoS Attack: SYN/ACK Scan] from source: 148.113.163.112, port 8003, Saturday, September 30, 2023 07:12:05
[DoS Attack: WinNuke Attack] from source: 46.121.236.232, port 12173, Saturday, September 30, 2023 06:45:38
[DoS Attack: NULL Scan] from source: 181.211.15.42, port 41634, Saturday, September 30, 2023 06:44:19
[DoS Attack: WinNuke Attack] from source: 46.121.236.232, port 10223, Saturday, September 30, 2023 06:35:09
[DoS Attack: TCP/UDP Echo] from source: 141.212.123.208, port 45480, Saturday, September 30, 2023 06:21:52
[DoS Attack: ACK Scan] from source: 165.22.243.218, port 1314, Saturday, September 30, 2023 05:57:18
[DoS Attack: RST Scan] from source: 103.161.34.174, port 8080, Saturday, September 30, 2023 05:57:17
[DoS Attack: WinNuke Attack] from source: 219.77.8.193, port 23688, Saturday, September 30, 2023 05:50:58
[DoS Attack: WinNuke Attack] from source: 94.187.233.193, port 15110, Saturday, September 30, 2023 05:26:36
[DoS Attack: WinNuke Attack] from source: 46.121.236.232, port 65091, Saturday, September 30, 2023 05:15:24
[DoS Attack: WinNuke Attack] from source: 94.187.233.193, port 43776, Saturday, September 30, 2023 05:04:19
[DoS Attack: RST Scan] from source: 14.191.144.92, port 15305, Saturday, September 30, 2023 05:03:23
[DoS Attack: ACK Scan] from source: 14.191.144.92, port 15305, Saturday, September 30, 2023 05:03:23
[DoS Attack: ACK Scan] from source: 185.224.128.184, port 16837, Saturday, September 30, 2023 04:49:36
[DoS Attack: WinNuke Attack] from source: 46.121.236.232, port 49223, Saturday, September 30, 2023 04:45:26
[DoS Attack: SYN/ACK Scan] from source: 162.55.93.122, port 443, Saturday, September 30, 2023 04:23:34
[DoS Attack: NULL Scan] from source: 87.236.30.22, port 22470, Saturday, September 30, 2023 04:21:18
[DoS Attack: ACK Scan] from source: 187.111.16.109, port 80, Saturday, September 30, 2023 04:06:58
[UPnP set event: del_nat_rule] from source 192.168.1.18, Saturday, September 30, 2023 04:06:30
[UPnP set event: add_nat_rule] from source 192.168.1.18, Saturday, September 30, 2023 04:06:05
[DoS Attack: SYN/ACK Scan] from source: 40.70.161.102, port 443, Saturday, September 30, 2023 04:05:17
[DoS Attack: WinNuke Attack] from source: 46.121.236.232, port 51971, Saturday, September 30, 2023 03:49:10
[DoS Attack: WinNuke Attack] from source: 94.187.233.193, port 8195, Saturday, September 30, 2023 03:34:15
[DoS Attack: WinNuke Attack] from source: 37.153.35.86, port 54588, Saturday, September 30, 2023 03:33:52
[DoS Attack: WinNuke Attack] from source: 59.149.106.163, port 61695, Saturday, September 30, 2023 03:00:15
[DoS Attack: WinNuke Attack] from source: 122.116.106.142, port 43594, Saturday, September 30, 2023 02:45:24
[DoS Attack: WinNuke Attack] from source: 59.149.106.163, port 36894, Saturday, September 30, 2023 02:22:14
[DoS Attack: ACK Scan] from source: 195.85.201.201, port 30120, Saturday, September 30, 2023 02:10:55
[DoS Attack: TCP/UDP Chargen] from source: 94.102.61.28, port 48678, Saturday, September 30, 2023 02:10:33
[DoS Attack: WinNuke Attack] from source: 122.116.106.142, port 11880, Saturday, September 30, 2023 01:53:03
[DoS Attack: WinNuke Attack] from source: 81.30.212.125, port 15830, Saturday, September 30, 2023 01:52:38
[DoS Attack: SYN/ACK Scan] from source: 43.159.20.5, port 443, Saturday, September 30, 2023 01:30:27
[DoS Attack: WinNuke Attack] from source: 46.121.236.232, port 18691, Saturday, September 30, 2023 01:25:04
[DoS Attack: SYN/ACK Scan] from source: 157.240.8.52, port 443, Saturday, September 30, 2023 01:15:24
[DoS Attack: ACK Scan] from source: 185.224.128.184, port 6573, Saturday, September 30, 2023 01:11:24
[DoS Attack: TCP/UDP Chargen] from source: 185.180.143.24, port 37540, Saturday, September 30, 2023 00:54:00
[DoS Attack: NULL Scan] from source: 132.147.93.13, port 9394, Saturday, September 30, 2023 00:53:11
[DoS Attack: ACK Scan] from source: 187.111.16.106, port 81, Saturday, September 30, 2023 00:46:38
[DoS Attack: SYN/ACK Scan] from source: 15.235.204.114, port 8822, Saturday, September 30, 2023 00:27:50
[DoS Attack: WinNuke Attack] from source: 94.187.233.193, port 27586, Friday, September 29, 2023 23:51:22
[admin login] from source 192.168.1.9, Friday, September 29, 2023 23:39:59
[DoS Attack: RST Scan] from source: 14.191.181.68, port 6381, Friday, September 29, 2023 23:39:45
[DoS Attack: ACK Scan] from source: 14.191.181.68, port 6381, Friday, September 29, 2023 23:39:45
[UPnP set event: del_nat_rule] from source 192.168.1.18, Friday, September 29, 2023 23:38:21
[DoS Attack: SYN/ACK Scan] from source: 173.239.38.100, port 80, Friday, September 29, 2023 23:36:55
[UPnP set event: add_nat_rule] from source 192.168.1.18, Friday, September 29, 2023 23:36:34
[UPnP set event: del_nat_rule] from source 192.168.1.18, Friday, September 29, 2023 23:32:18
[DoS Attack: NULL Scan] from source: 132.147.93.13, port 62513, Friday, September 29, 2023 23:27:49
[DoS Attack: SYN/ACK Scan] from source: 145.239.130.69, port 8006, Friday, September 29, 2023 23:24:32
[DoS Attack: WinNuke Attack] from source: 94.187.233.193, port 25020, Friday, September 29, 2023 23:15:22
[DoS Attack: ACK Scan] from source: 52.177.138.113, port 443, Friday, September 29, 2023 23:09:45
[admin login] from source 192.168.1.9, Friday, September 29, 2023 23:09:11
[DoS Attack: ACK Scan] from source: 52.177.138.113, port 443, Friday, September 29, 2023 23:09:08
[DoS Attack: WinNuke Attack] from source: 37.153.35.86, port 866, Friday, September 29, 2023 22:58:13
[DoS Attack: ACK Scan] from source: 52.177.138.113, port 443, Friday, September 29, 2023 22:52:33
[DoS Attack: WinNuke Attack] from source: 128.75.107.113, port 36763, Friday, September 29, 2023 22:52:13
[admin login] from source 192.168.1.9, Friday, September 29, 2023 22:52:09
[DoS Attack: SYN/ACK Scan] from source: 51.79.162.88, port 30120, Friday, September 29, 2023 22:51:34
[DoS Attack: WinNuke Attack] from source: 122.116.106.142, port 52507, Friday, September 29, 2023 22:46:40
[WLAN access denied] from MAC : 0E:36:C9:09:12:03, Friday, September 29, 2023 22:32:54
[Access Control] Device Unknown with MAC address 0E:36:C9:09:12:03 is blocked to access the, Friday, September 29, 2023 22:32:54
[UPnP set event: add_nat_rule] from source 192.168.1.18, Friday, September 29, 2023 22:32:28
[Time synchronized with NTP server] Friday, September 29, 2023 22:31:15
[Initialized, firmware version: V2.7.4.24] Friday, September 29, 2023 22:31:13

1 REPLY 1
BasilDV
Moderator

Hi @Allicit 

 

Is the firewall on your router currently enable?

Make sure to strengthen your security to prevent the DoS attack.

 

Also, in order to check the connection dropouts, please send us a private message with your account details.

 

BasilDV