WAN Ping Attack messages
This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
I'm not very knowledgeable when it comes to networking. I recently purchased some Wi-Fi smart outlets (Smart Plug EIGHTREE on Amazon), and since I set them up, I've been receiving the following warning message approximately every ten minutes:
WARNING [osg:ER605 Router XXXX] detected WAN Ping attack from 157.185.175.27 and dropped 230 packets.
I'm not sure if the two events are related, but the timing indicates they are. I have the outlets connected on a subnet that is separate from my main network.
I have some questions about these warnings.
- What might be causing these WAN ping attacks?
- What should I do to mitigate them? And/or the warning messages?
- Is this an indication that the smart outlets are not trustworthy and should be returned?
If there are more details I can provide that would help in diagnosing, let me know.
Thanks for posting in our business forum.
1. Your WAN may be exposed to someone. Or leaked. Unable to determine if this is an attack or a false alarm. I searched this IP, seems to be metaverse's ASN.
Do you have any Metaverse products?
Might be a false alarm.
2. ACL can block WAN IN traffic. So, enter this IP address with /32, you can block it from pinging your WAN IP. Or you can turn off the notification but it still pings your IP but the system does not show this warning anymore. So, go to Log and disable firewall-related notifications/warnings.
3. No. I would so some further research before making a conclusion that your smart outlets are not trustworthy.
So, basically, you can remove the smart outlets and check if this ping still continues, if it stops, that would be a problem with the smart outlets. Plug it back and monitor if there is any more warnings.
The log reports every 10 minutes. It does not spam the entries so you probably need to wait for a while and check that.