Forum Discussion

Toomer's avatar
Toomer
New Contributor
3 years ago

DoS attack] ICMP Flood from

I saw posts from 5 years ago and now I have the same problem. Intermittent Internet connection while my network is still up. I just installed a new NETGEAR AC1750 WiFi cable modem router. ( C6300v2) Checking the logs I see many,many  of these messages:

[DoS attack] ICMP Flood from 52.83.237.173     1    Friday, 14 Oct 2022 13:32:31    xxx.190.xxx.230    52.83.237.173


DoS attack] ICMP Flood from 98.143.148.50     1    Friday, 14 Oct 2022 13:18:17    xxx.190.xxx.230    98.143.148.50

DoS attack] ICMP Flood from 103.44.255.131     1    Friday, 14 Oct 2022 13:00:16    xxx.190.xxx.230    103.44.255.131

Then I loose the Internet and it stays off for about 10 min. to 15. Then magically it comes back.

Any and all help would be appreciated. Thanks.

  • Bruce's avatar
    Bruce
    Honored Contributor III

    Keep posting your public IP address online and you're liable to get more.

    • Darkatt's avatar
      Darkatt
      Honored Contributor

      Maybe I missed something, but it doesn't appear he published his public IP address. 

      That aside,  there will always be someone trying to hack, there are probes going out all the time to various IP addresses. Most routers have settings to help deal with flooding. 

      • Bruce's avatar
        Bruce
        Honored Contributor III

        OP later edited IP address.

        These are probably ports scans, and ports scans are as old as the Internet.  The processors in routers get bogged logging these scans so perhaps turn off logging port scans.  This traffic goes through the Cox network so they can see 'em as well.

  • DavidA2's avatar
    DavidA2
    Former Moderator
    Hi Toomer,

    I am sorry to hear that you are having trouble with intermittent service. Please feel free to email us at cox.help@cox.com with your service address and a link to this forum thread. We would be happy to look into that with you.

    David
    Cox Forums Moderator