Home

Forums

Stories

Knowledge Base

Business Community > All Threads > Detected TCP SYN packets attack and dropped - every 10 minutes

< All Threads

Detected TCP SYN packets attack and dropped - every 10 minutes

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

Detected TCP SYN packets attack and dropped - every 10 minutes

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

djwujek

2023-11-08 19:48:44 - last edited 2023-11-10 07:09:06

Posts: 13

Helpful: 1

Solutions: 0

Stories: 0

Registered: 2022-07-22

Detected TCP SYN packets attack and dropped - every 10 minutes

2023-11-08 19:48:44 - last edited 2023-11-10 07:09:06

Model: ER605 (TL-R605)

Hardware Version: V2

Firmware Version: 2.2.2

Hello.
I have the latest version of frimware installed, number 2.2.2 Build 20231017 Rel.68869, I have an external IP address and in the logs every 10 minutes there is an entry " [3C-52-A1-F6-27-E8] Detected TCP SYN packets attack and dropped 290 packets "
How to turn it off or block it and how to prevent it from showing up?
I have an ER605v2 router without a controller connected directly to the switch.

1 Accepted Solution

Clive_A

2023-11-09 02:27:23 - last edited 2023-11-10 07:09:06

Posts: 6031

Helpful: 2968

Solutions: 1384

Stories: 0

Registered: 2023-06-09

Re:Detected TCP SYN packets attack and dropped - every 10 minutes-Solution

2023-11-09 02:27:23 - last edited 2023-11-10 07:09:06

Hi @djwujek

Thanks for posting in our business forum.

Would recommend you take a look at this. Currently, the firmware does not support showing the attack IP. But the ACL can block it by Wiresharking its IP address.

https://community.tp-link.com/en/business/forum/topic/636216

Or you can refer to this to turn off the block: Solution Solution to ER605 V1 1.3.0 Firmware Got Many Logs of "TCP no-Flag attack" Issue

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update! ☛Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.

Recommended Solution

1 Reply

Clive_A

2023-11-09 02:27:23 - last edited 2023-11-10 07:09:06

Posts: 6031

Helpful: 2968

Solutions: 1384

Stories: 0

Registered: 2023-06-09

Re:Detected TCP SYN packets attack and dropped - every 10 minutes-Solution

2023-11-09 02:27:23 - last edited 2023-11-10 07:09:06

Hi @djwujek

Thanks for posting in our business forum.

Would recommend you take a look at this. Currently, the firmware does not support showing the attack IP. But the ACL can block it by Wiresharking its IP address.

https://community.tp-link.com/en/business/forum/topic/636216

Or you can refer to this to turn off the block: Solution Solution to ER605 V1 1.3.0 Firmware Got Many Logs of "TCP no-Flag attack" Issue

Information

Helpful: 0

Replies: 1

Detected TCP SYN packets attack and dropped - every 10 minutes

Detected TCP SYN packets attack and dropped - every 10 minutes

Information

Voters 0

Tags