Smart home manager app blocked a suspicious attack

Hi there, @nicolerich1931. We're here to help get you past the alerts you have been receiving.

The alerts you are receiving on Smart Home Manager are warnings that a Distributed Denial of Service (DDoS) attack. It’s a type of cyberattack that attempts to make an online service slow or unavailable by overwhelming it with traffic from PCs, tablets, smartphones, and other devices. While this is occurring, they can try to gather information from your network.  

We understand in the past you were not receiving these alerts. Are you using different settings on the new router? Also, you are using IP Passthrough? If so, try turning off the IPv6, and unplugging the equipment for a period of 24 hours, see if that resolves the DOS attacks that are coming through. 

You can disable IPv6 inside the router by:

1. Open up a web browser.
2. Type 192.168.1.254.
3. Enter in username and password
4. Username is admin.
5. Password is the Access Key or A/C located on the gateway.
6. Find the LAN tab.
7. Select subcategory IPv6.
8. Save settings.
9. Exit.

We also offer DDos Defense, which provides cloud-based monitoring of volumetric distributed denial of service attacks with detailed traffic analysis and may activate mitigation to help prevent malicious traffic from entering your network.

We hope this helps. Please reach out if you have any questions or concerns. 

Rosey, AT&T Community Specialist 

I do have more questions, bc I would like to be able to see my cameras remotely and still have a safe network and need assistance.  What number can I call to get to the right department that can help me.  What department do I need to speak to?  I called the other day and the 2 I spoke to we of no help,  I don’t think they understood my situation.  Thanks.

Hi @, We are looking into this for you, but before we proceed we have two questions. 

1 What URL is popping up when you see the error?

2 What is your RG type?

Looking forward to receiving the needed info so we can sort this out for you as soon as possible.

Sara, AT&T Community Specialist

I don’t know either one exactly.  It’s not a url, I don’t think, it’s the AT&T Smart Home App.  It says my nvr camera is being attacked and it says the ip address of the attacker, these are the 2 most used : 89.248.168.235 and 94.102.61.## the last 2 digits are rolling #’s from 2-50.    

As far as the cables I don’t know the AT&T man installed the new modem, but the cable from the modem to the nvr recorder is an Ethernet cat5 cable.  It’s several years old.  We haven’t changed anything.  Like I said I just opened the pinhole for the cameras to be seen remotely, after the new modem.  I did it the same as I had done previously roughly 8 years ago when we received the last modem.  

I did turn of the ivp6 at least I think I did, the instructions didn’t exactly match my options (I didn’t find a lan page) it was under home network tab Ivp6 and I clicked off and saved.  But I just saw these, should these be off?

DHCP Server This was on with the camera ip address.  I just turned this off - correct?

I unplugged the modem last night, but then plugged it back in bc (it was like 3am) and the house alarm was set and I didn’t want it to start beeping bc it lost phone connection.  The modem supplies our internet for the house phone, house alarm, tv, thermostat and so much more, it would be a symphony of beeps when everything goes down.  We’ll try again for a few hours during the day.  

I think I got your questions.  Let me know if you need something else I’ll try to find it.  Thank you again for your assistance.

Hi @nicolerich1931

Thank you for the details.

We appreciate your efforts. Let's take this conversation private as we would require few more details. Be on the look-out for a notification on the top right corner of your page next to the bell icon.

Happy to assist.

Sara, AT&T Community Specialist

👍 

Can someone repost a private chat link.  I didn’t see it when it was sent and then the link disappeared and the private chat never happened. 

I never spoke directly with someone in regards to helping me setup a port forwarding for my security cameras.  Again I request what phone can I call to get this technical assistance?

to reach port fowarding  can be access via your router login page 192.168.1.254 log in with information on router then click on firewall after that click on NAT/gaming if you need more help lmk

I know how to do it, but there is continuous security risk/breach.  I kept getting warnings.  So I’m missing an important piece of information to keep my system safe.