For the past few days, I noticed our internet kicking out for about 10 minutes at a time. (Actually, kicks for a few seconds, then a few seconds later it kicks for a couple minutes, then a minute after getting on again, it kicks for a few minutes again.)
After a few times, I dove into the 'gateway' and poked around. Finding the logs, I checked and found that the initial moment of kick out was also when WANATTACK was logged. Looking it up, this is basically someone trying to brute force hack in. Well, each time internet dropped I would check again to confirm it lined up with a WANATTACK.
Well, just now I decided to check how long it has been happening and checked the firewall log for the longest period available (90 days). Looks like it has actually been happening several times a day all along.
FW.IPv6 FORWARD drop , 7764 Attempts, 2021/12/28 18:26:57 Firewall Blocked
FW.WANATTACK DROP , 4 Attempts, 2021/12/28 18:26:57 Firewall Blocked
FW.IPv6 INPUT drop , 1297 Attempts, 2021/12/28 18:26:57 Firewall Blocked
FW.IPv6 FORWARD drop , 6261 Attempts, 2021/12/27 18:26:57 Firewall Blocked
FW.WANATTACK DROP , 38 Attempts, 2021/12/27 18:26:57 Firewall Blocked
FW.IPv6 INPUT drop , 1237 Attempts, 2021/12/27 18:26:57 Firewall Blocked
So basically, this attack is apparently normal... and just happens to line up with my connection dropping. This means I don't know what is actually causing connection drops... or didn't notice them before. Just wish it would also log events that cause failure to connect to the internet. (The event logs have nothing that lines up with the drops.)
Additional Note : the LAN still works perfectly fine during these drops. I can even log into the 'gateway'. I just lose internet connection.
