Hi,My orbi system turn off a view time's a week. When I take a look at the log file there is a dos attack standing on that time. I'm using:firmware version 2.3.5.30orbi system RBR50 can someone help me out?

My experience (since I began saving Orbi logs on two systems last March) is that the Orbi recognizes dozens of what it characterizes as "DOS Attacks" every day. Already since Jan 1, my Orbi has logged 82. Last fall, there was a period of about a week when the number of attempts was 3-4 times "normal". Yet, my Orbi never goes down. One of the things that annoys users is that when the Orbi "reboots", the log file is erased, and thus does not record "what happened". So, I have no doubt that you are correct that the Orbi is having a problem several times a week, and it can be a struggle to identify and resolve the problem. The DOS attacks that are recorded are entirely normal and are not likely to be the cause. As an example, my phone gets 20-30 "robocalls" every day. Yet, if my phone service goes down, it is not likely to be the robocalls that caused it. We generally start by asking:What firmware release is on the Orbi now?(and, no, we are not asking you to "update firmware". sometimes that is the wrong thing to do.)What brand and model of modem is the Orbi connected to?Is there a distinct "pattern" to the service interruption?(once a day? 2-4 times a day?)Is there a distinct pattern to how long it is before the Orbi fails from the time you restart it?

the firmware version is V2.3.5.30the brand of the modem is one of my providerand there is not something like a pattern to the service interruption. sometimes it happens twice a day and sometimes it works good for a whole week.

Anyway to block external ip addresses being tagged as Dos attackers?

The Orbi is "blocking" those attempts already. The only way to keep them from reaching the Orbi is at the ISP, and my experience is that is something they are not set up to do. When my phone says an incomming call is "Listed as a telemarketer", the call has already arrived. You can instruct the Orbi to stop logging these nuisances. They will still be there, but you will not be told about them. All of the annoying robocalls that come to my phone and do not leave a message appear in my "Missed Calls" list. I choose not to scroll through the list of "missed calls", but those calls still happened. It is not acceptable when a WiFi router fails often. My Orbi stays up and running for months despite all of these things being logged. If the Orbi is having to be rebooted often, I am very confident (1) there is a problem, and (2) the problem is not these DoS attempts in the log file.

I did a reinstall last weekend but today there was the same problem as before. So the problem is still there.

orbi network turn of by dos attack

23 Replies

CrimpOn
Guru
Jan 05, 2020
My experience (since I began saving Orbi logs on two systems last March) is that the Orbi recognizes dozens of what it characterizes as "DOS Attacks" every day. Already since Jan 1, my Orbi has logged 82. Last fall, there was a period of about a week when the number of attempts was 3-4 times "normal". Yet, my Orbi never goes down. One of the things that annoys users is that when the Orbi "reboots", the log file is erased, and thus does not record "what happened".

So, I have no doubt that you are correct that the Orbi is having a problem several times a week, and it can be a struggle to identify and resolve the problem. The DOS attacks that are recorded are entirely normal and are not likely to be the cause. As an example, my phone gets 20-30 "robocalls" every day. Yet, if my phone service goes down, it is not likely to be the robocalls that caused it.

We generally start by asking:
What firmware release is on the Orbi now?
(and, no, we are not asking you to "update firmware". sometimes that is the wrong thing to do.)
What brand and model of modem is the Orbi connected to?
Is there a distinct "pattern" to the service interruption?
(once a day? 2-4 times a day?)
Is there a distinct pattern to how long it is before the Orbi fails from the time you restart it?
- Z190mn
  Tutor
  Jan 06, 2020
  the firmware version is V2.3.5.30
  the brand of the modem is one of my provider
  and there is not something like a pattern to the service interruption.
  sometimes it happens twice a day and sometimes it works good for a whole week.
  - ssgtweasel
    Guide
    Jan 15, 2020
    Anyway to block external ip addresses being tagged as Dos attackers?

Forum Discussion

orbi network turn of by dos attack