NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
DoS attacks (ACK & STORM) - causing DNS issues and connection drops?
This is a continuation of issues here: For the last month+, DNS issues and dropped Wi-Fi (now using R7000P) Netgear support emailed me back and said I have a DoS attack. This is part of the info...
Oh, dear. User error. I can post again in the correct forum.
But I appreciate you taking a moment to respond.
As of this morning, I had the same issue (internet randomly dropped). The Nighthawk app couldn't resolve the issue, but the Netgear Genie on my work laptop forced a reboot, and I was reconnected. The Netgear support agent suggested I talk to my ISP, but my ISP said that due to the DoS attack, they can't access my modem. To my ISP, they show my modem as offline, even though that isn't the case.
I guess I am uncertain what to do now. Both Sparklight and Netgear have been unhelpful in getting this resolved, and I really have no idea what I'm actually dealing with. Could this simply be a modem malfunction? A router malfunction (TWO different Nighthawk models)? Since I connected the TP-Link router, I see no DoS attacks in the log, and the internet connection has been fine. So do I need a new modem?
Apologies for the question. I just have no idea where to go from here.
I would be tempted to "let it ride" with the TP-Link router for now.
(in my opinion) "DOS attacks" are no reason for the ISP to be unable to reach the modem.
If you provide the specific model of TP-Link router, we can check the user manual to see if it even reports "DOS attacks."
- There is no actual reason to log these events. The router rejects all these connection attempts. I (personally) view it as entertainment.
Does your telephone present you with a log of Robo-Calls?
Does the Post Office give you a list of Junk Mail? - There have been posts which suggest that Netgear's algorithms for detecting these "attacks" are too sensitive.
(I have no idea.)
If the TP-Link router maintains internet connectivity for days, I would be tempted to leave things as they are.
Thanks again for responding. I posted in the correct forum: https://community.netgear.com/t5/Nighthawk-WiFi-Routers/DoS-attacks-ACK-amp-STORM-causing-DNS-issues-and-connection/m-p/2147416#M200977
I called Sparklight again and asked if they can reset my connection without connection to my modem. They said no, and that I'm still showing offline on their end.
TP-Link AC4000: https://www.tp-link.com/us/support/download/archer-c4000/. UG here. I skimmed it and didn't see anything about logging DoS attacks.
(I'll consider this thread closed now.)
Thanks again!
