NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

marteeleigh's avatar
marteeleigh
Tutor
Oct 05, 2021

DoS attacks (ACK & STORM) - causing DNS issues and connection drops?

This is a continuation of issues here: For the last month+, DNS issues and dropped Wi-Fi (now using R7000P)    Netgear support emailed me back and said I have a DoS attack. This is part of the info...
CrimpOn's avatar
CrimpOn
Guru - Experienced User
Oct 05, 2021
marteeleigh wrote:

Can anyone please help me? 

 

I am puzzled how this issue popped up in the Netgear Orbi community forum, as there is no Orbi involved in the problem and whatever the problem is, it appears to affect both a Netgear router and a TP-Link router.

However.......

 

It would be helpful to understand exactly what is wrong, right now.

 

  • The Motorolla 8600 appears to be on the Sparklight list of approved modems:
    https://support.sparklight.com/hc/en-us/articles/115009158227-Supported-Cable-Modems-Residential-Only 
    If Sparklight is not able to access the modem, "something is wrong," and it has nothing to do with Netgear.
  • Is there still a "DNS Problem"?  What are the symptoms?
  • I can attest to the simple fact that "attacks" are constant and (in my opinion) have little effect on routers. I collect the logs from two Orbi systems and they both report "attacks" every day of the month, and they never fail.  How many Robo-Calls do you receive? Does your phone still function?

Sorry to appear confused, but this post has been going on for two weeks and I am unable to get a sense of "where things are".

 

 

 

  • marteeleigh's avatar
    marteeleigh
    Tutor
    Oct 05, 2021

    Oh, dear. User error. I can post again in the correct forum. 

     

    But I appreciate you taking a moment to respond. 

     

    As of this morning, I had the same issue (internet randomly dropped). The Nighthawk app couldn't resolve the issue, but the Netgear Genie on my work laptop forced a reboot, and I was reconnected. The Netgear support agent suggested I talk to my ISP, but my ISP said that due to the DoS attack, they can't access my modem. To my ISP, they show my modem as offline, even though that isn't the case. 

     

    I guess I am uncertain what to do now. Both Sparklight and Netgear have been unhelpful in getting this resolved, and I really have no idea what I'm actually dealing with. Could this simply be a modem malfunction? A router malfunction (TWO different Nighthawk models)? Since I connected the TP-Link router, I see no DoS attacks in the log, and the internet connection has been fine. So do I need a new modem? 

     

    Apologies for the question. I just have no idea where to go from here. 

    • CrimpOn's avatar
      CrimpOn
      Guru - Experienced User
      Oct 05, 2021

      I would be tempted to "let it ride" with the TP-Link router for now.

       

      (in my opinion) "DOS attacks" are no reason for the ISP to be unable to reach the modem.

      If you provide the specific model of TP-Link router, we can check the user manual to see if it even reports "DOS attacks."

      • There is no actual reason to log these events. The router rejects all these connection attempts.  I (personally) view it as entertainment.
        Does your telephone present you with a log of Robo-Calls?
        Does the Post Office give you a list of Junk Mail?
      • There have been posts which suggest that Netgear's algorithms for detecting these "attacks" are too sensitive.
        (I have no idea.)

      If the TP-Link router maintains internet connectivity for days, I would be tempted to leave things as they are.