Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[eenguz]

hello, so just yesterday my latency suddenly went unusually high and i decided to check my router's log if it was able to trace where the traffic was coming from and to my surprise my log was filled with these

both from LAN and WAN. this 192.168.0.103 that was detected is my iphone and i have clearly no idea how my phone could ping attack my own network.

Jan 1 14:12:13   PING-FLOODING flooding attack from WAN (ip:101.31.37.34) detected.
Jan 1 14:12:07   PING-FLOODING flooding attack from WAN (ip:31.41.56.34) detected.
Jan 1 14:12:01   PING-FLOODING flooding attack from WAN (ip:87.251.181.13) detected.
Jan 1 14:11:55   PING-FLOODING flooding attack from WAN (ip:46.241.168.99) detected.
Jan 1 14:11:49   PING-FLOODING flooding attack from WAN (ip:89.141.124.16) detected.
Jan 1 14:11:45   PING-FLOODING flooding attack from WAN (ip:86.61.251.82) detected.
Jan 1 14:11:38   PING-FLOODING flooding attack from WAN (ip:85.48.158.42) detected.
Jan 1 14:11:32   PING-FLOODING flooding attack from WAN (ip:213.176.240.114) detected.
Jan 1 14:11:25   PING-FLOODING flooding attack from WAN (ip:121.226.23.162) detected.
Jan 1 14:11:19   PING-FLOODING flooding attack from WAN (ip:93.128.252.218) detected.

Jan 1 14:11:16   Xmas port scan attack from WAN (ip:139.218.175.230) detected.
Jan 1 14:11:13   PING-FLOODING flooding attack from WAN (ip:69.156.36.52) detected.
Jan 1 14:11:07   PING-FLOODING flooding attack from WAN (ip:221.138.220.44) detected.
Jan 1 14:11:01   PING-FLOODING flooding attack from WAN (ip:217.92.88.119) detected.
Jan 1 14:10:58   PING-FLOODING flooding attack from WAN (ip:118.219.73.162) detected.
Jan 1 14:10:49   PING-FLOODING flooding attack from WAN (ip:91.202.144.135) detected.
Jan 1 14:10:43   PING-FLOODING flooding attack from WAN (ip:36.69.117.32) detected.
Jan 1 14:10:37   PING-FLOODING flooding attack from WAN (ip:117.211.27.38) detected.
Jan 1 14:10:32   PING-FLOODING flooding attack from WAN (ip:190.114.246.90) detected.
Jan 1 14:10:26   PING-FLOODING flooding attack from WAN (ip:181.15.229.78) detected.

Jan 1 18:21:03   PING-FLOODING flooding attack from LAN (ip:192.168.0.103) detected.
Jan 1 18:20:59   PING-FLOODING flooding attack from LAN (ip:192.168.0.103) detected.
Jan 1 18:20:59   PING-FLOODING flooding attack from LAN (ip:192.168.0.103) detected.
Jan 1 18:19:56   PING-FLOODING flooding attack from WAN (ip:90.236.128.160) detected.
Jan 1 18:12:41   PING-FLOODING flooding attack from WAN (ip:66.85.130.13) detected.

Jan 1 19:13:16   PING-FLOODING flooding attack from LAN (ip:192.168.0.103) detected.
Jan 1 19:07:05   PING-FLOODING flooding attack from WAN (ip:211.245.4.41) detected.
Jan 1 19:06:09   PING-FLOODING flooding attack from LAN (ip:192.168.0.103) detected.
Jan 1 19:06:09   PING-FLOODING flooding attack from LAN (ip:192.168.0.103) detected.
Jan 1 18:59:23   PING-FLOODING flooding attack from LAN (ip:192.168.0.103) detected.
Jan 1 18:59:18   PING-FLOODING flooding attack from LAN (ip:192.168.0.103) detected.

if u guys could help me..

[FurryNutz]

Link>Welcome!

• What Hardware version is your router? Look at sticker under the router case.
• Link>What Firmware version is currently loaded? Found on the routers web page under status.
• What region are you located?
• Are you wired or wireless connected to the router?

Internet Service Provider and Modem Configurations

• What ISP Service do you have? Cable or DSL?
• What ISP Modem Mfr. and model # do you have?
• Is ISP Modem/Service using Dynamic or Static WAN IP addressing?
• What ISP Modem service link speeds UP and Down do you have?

The logs are indicating what the router is designed to do, let you now of what the firewall is capturing and blocking. I recommend you phone contact your ISP provider and ask them to check your modem, signal and any unusual activity on your line. Ask them to change the WAN IP address.

[eenguz]

What Hardware version is your router? Look at sticker under the router case. H/W is BX
Link>What Firmware version is currently loaded? Found on the routers web page under status. Firmware version is 2.02
What region are you located? I am located in southeast asia. The philippines
Are you wired or wireless connected to the router? Wired

What ISP Service do you have? Cable or DSL? DSL
What ISP Modem Mfr. and model # do you have? My ISP model is old..it's the only modem weve used from my ISP (subscribed to them for more than 6 yrs now)
Is ISP Modem/Service using Dynamic or Static WAN IP addressing? Dynamic
What ISP Modem service link speeds UP and Down do you have? normally, my dl speed is at 3mbps, ul speed at 0.8mbps and ping is 31 (according to speedtest), but ever since those ping flood attacks started coming my dl & upload speeds have been fluctuating and my ping(which im very concerned about) stays at 140 ms

[FurryNutz]

 I recommend you phone contact your ISP provider and ask them to check your modem, signal and any unusual activity on your line. Ask them to change the WAN IP address.