• June 03, 2024, 08:57:05 PM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Author Topic: Logging wrong stuff! "ATTACK Detected: 001[Xmas] attack from WAN..."  (Read 10905 times)

johsm67

  • Level 1 Member
  • *
  • Posts: 24

My DIR-685 is logging some strange messages!

ATTACK Detected: 001[Xmas] attack from WAN (ip:x.x.x.x) detected. Packet dropped

If i analyse the IP's in use it's all coming randomly from known services such as Apple, MSN, My Mailserers i'm using! I suspect the DIR-685 is logging wrong or is dropping "legal" packages based on the source IP's
As it's only from systems that i do access!

Is it a bug in the firmware? Any one else seen it?

/Johan
Logged

morphy

  • Level 2 Member
  • **
  • Posts: 63
Re: Logging wrong stuff! "ATTACK Detected: 001[Xmas] attack from WAN..."
« Reply #1 on: January 29, 2010, 11:48:11 AM »

Yes I have had a few of them. M
Logged

jkanters

  • Level 1 Member
  • *
  • Posts: 6
Re: Logging wrong stuff! "ATTACK Detected: 001[Xmas] attack from WAN..."
« Reply #2 on: February 06, 2010, 02:27:42 AM »

I have them too, but I havent felt that they bother relevant communication
Logged

Spoonman2112

  • Level 1 Member
  • *
  • Posts: 8
Re: Logging wrong stuff! "ATTACK Detected: 001[Xmas] attack from WAN..."
« Reply #3 on: February 06, 2010, 09:12:43 AM »

Yeah, I've seen a couple of those, but haven't had any problems with connectivity.
Logged

weeyung

  • Level 1 Member
  • *
  • Posts: 1
Re: Logging wrong stuff! "ATTACK Detected: 001[Xmas] attack from WAN..."
« Reply #4 on: February 17, 2012, 09:02:34 AM »

I met this too, it interrupted my internet connectivity.. what is that actually? Somebody hack it? does this happen to DIR-685 only?
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Logging wrong stuff! "ATTACK Detected: 001[Xmas] attack from WAN..."
« Reply #5 on: February 21, 2012, 07:36:36 AM »

Being that it's been a while since anyone reported any results on this, I would presume this is a isolated incident with traffic coming into the router and the router reporting that it blocked the offending data packets and is working as designed.  I would call your ISP and ask them if there is any information on this and if they can help block it if it seems to become a problem.
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.