DOS Attack ?

[Deleted member 22229]

I have a 2 week old Netgear R-7000 and seen this in the log today.

[DoS attack: FIN Scan] attack packets in last 20 sec from ip [173.241.244.221]

Is this anything to be concerned about i have never seen this kind of log in any router i have owned. The log dont make it clear if this was just a attempt or they were successful. Any one have this happen and can give me advice whats actually going on here. I see the IP is from Cal.

 

[sfx2000]

Sounds like this is on your WAN link... It's not a DOS attempt if you only see it for a few seconds... FIN scans are typical, and it's probably someone out there that's looking for Open vs. Closed ports - FIN scans will return a RST on a closed port, indicating that your endpoint is present.

It's just network mapping on the WAN side of the link, nothing to worry about perhaps.