Smurf attacks from Amazon?

Toggle sidebar Toggle sidebar
L

leftisthominid

Distinguished
Jan 7, 2014
342
0
18,790
Hello,

I have a Netgear router. Yesterday, I was looking at my router log when I had just gotten home. I had no network devices on while I was out. I noticed the following entry in the log

[DoS attack: Smurf] attack packets in last 20 sec from ip [52.35.136.255], Thursday, Sep 08,2016 18:00:59

This morning as I was getting up, I was looking at my log again to see if there were any other smurf attacks, and I found this one

[DoS attack: Smurf] attack packets in last 20 sec from ip [52.35.136.255], Friday, Sep 09,2016 07:40:57

I looked up the IP address, and it belongs to Amazon. What is going on here? Why is Amazon attacking my network?
 
Sort by date Sort by votes
Shaun o

Shaun o

Illustrious
Oct 7, 2007
6,113
1
41,960
I highly doubt it was amazon doing the denial of service attack on your router.

It would be more likely down to to a hacker, or if you also have a games console connected to your network.
Where when playing a game if you have, you have has some altercation with another player.

The Ip was likely masked.

Dos attacks from other users often happen from time to time, for example there have been a few times where my friend has called someone out for cheating in games while playing them on his Ps4. and then the router has been flooded with Dos as revenge.

 
Upvote 0 Downvote
L

leftisthominid

Distinguished
Jan 7, 2014
342
0
18,790


My computers were all powered down completely. My Xbox 360 was completely off, and my Wii U was completely unplugged. I don't play games online, only single player. When the first one happened, my apartment was completely empty and nothing was connected to the network. Between leaving and coming back, there were no devices connected to the network.
 
Upvote 0 Downvote
Wolfshadw

Wolfshadw

Titan
Moderator
Aug 3, 2006
28,229
1,515
133,290
If I understand this correctly, you were not the intended target of the DoS attack. It was actually Amazon, but since your Modem/Router's IP address was affiliated with Amazon's Network (you've surfed to a page on their web site), the DoS attack saw your Modem/Router as part of the Amazon network and tried to shut you down as well.

-Wolf sends

Edit: I wouldn't worry about it.
 
Upvote 0 Downvote
L

leftisthominid

Distinguished
Jan 7, 2014
342
0
18,790


You are misreading. Absolutely nothing was connected to my network when the first attack occurred.

 
Upvote 0 Downvote
L

leftisthominid

Distinguished
Jan 7, 2014
342
0
18,790
[DoS attack: Smurf] attack packets in last 20 sec from ip [52.35.136.255], Friday, Sep 09,2016 19:02:59
[DoS attack: Smurf] attack packets in last 20 sec from ip [52.35.136.255], Friday, Sep 09,2016 12:47:52

Two more attacks while nothing was connected to my router
 
Upvote 0 Downvote
Wolfshadw

Wolfshadw

Titan
Moderator
Aug 3, 2006
28,229
1,515
133,290
It seems to me that your router is reporting packets from externally connected devices. Unless you disconnect your router/modem, it's always connected to the Internet. The attack is coming from Amazon's network and is not affecting any computers on your network (connected or not).

-Wolf sends
 
Upvote 0 Downvote
L

leftisthominid

Distinguished
Jan 7, 2014
342
0
18,790
Someone on the Netgear forum pointed out that it was coming from Amazon AWS, so it is not Amazon proper but instead an Amazon renter.

So basically someone is attacking my router, my router is stopping them, and I should not worry?
 
Upvote 0 Downvote
Wolfshadw

Wolfshadw

Titan
Moderator
Aug 3, 2006
28,229
1,515
133,290
Again, as I understand it, no one is attacking your router (directly). The DoS attack is directed at a specific target and then is spread to any attached systems or IP addresses it finds associated with the attacked router. Your router's IP address was probably saved in the attacked router's cache (or something like that) which makes it a secondary target.

No. You should not worry.

-Wolf sends
 
Upvote 0 Downvote
L

leftisthominid

Distinguished
Jan 7, 2014
342
0
18,790


I found a solution. I contacted Amazon AWS abuse support, and it looks like they took down the Smurf attacker.
 
Upvote 0 Downvote
You must log in or register to reply here.

TRENDING THREADS

Latest posts

Moderators online

Share this page

COMPANY
RESOURCES
FOLLOW
Top Bottom