NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Slow/Inconsistent Wifi. DoS attack!
Please help!! My wifi keeps restarting!! This is my log.
[DHCP IP: 10.0.0.11] to MAC address cc:6e:a4:4a:7f:72, Sunday, August 30, 2020 18:19:11
[DoS Attack: ACK Scan] from source: 199.127.204.100, port 443, Sunday, August 30, 2020 18:18:56
[DoS Attack: ACK Scan] from source: 192.229.173.16, port 443, Sunday, August 30, 2020 18:18:35
[DoS Attack: ACK Scan] from source: 192.229.210.163, port 443, Sunday, August 30, 2020 18:18:34
[DoS Attack: ACK Scan] from source: 192.229.173.16, port 443, Sunday, August 30, 2020 18:18:33
[DoS Attack: ACK Scan] from source: 192.229.210.163, port 443, Sunday, August 30, 2020 18:18:32
[DoS Attack: ACK Scan] from source: 192.229.173.16, port 443, Sunday, August 30, 2020 18:18:31
[DoS Attack: ACK Scan] from source: 192.229.210.163, port 443, Sunday, August 30, 2020 18:18:30
[DoS Attack: ACK Scan] from source: 192.229.173.16, port 443, Sunday, August 30, 2020 18:18:29
[DoS Attack: ACK Scan] from source: 192.229.210.163, port 443, Sunday, August 30, 2020 18:18:28
[DoS Attack: ACK Scan] from source: 192.229.173.16, port 443, Sunday, August 30, 2020 18:18:27
[DoS Attack: ACK Scan] from source: 192.229.210.163, port 443, Sunday, August 30, 2020 18:18:26
[DoS Attack: ACK Scan] from source: 52.223.227.178, port 443, Sunday, August 30, 2020 18:18:13
[admin login] from source 10.0.0.10, Sunday, August 30, 2020 18:18:07
[DoS Attack: ACK Scan] from source: 199.127.204.100, port 443, Sunday, August 30, 2020 18:17:52
[DHCP IP: 10.0.0.10] to MAC address b4:2e:99:fa:b2:47, Sunday, August 30, 2020 18:17:45
[DoS Attack: ACK Scan] from source: 103.103.41.145, port 443, Sunday, August 30, 2020 18:16:39
[DHCP IP: 10.0.0.14] to MAC address 7c:a1:ae:72:0f:d9, Sunday, August 30, 2020 18:16:21
[DoS Attack: ACK Scan] from source: 103.103.41.145, port 443, Sunday, August 30, 2020 18:09:01
[DoS Attack: ACK Scan] from source: 103.103.40.68, port 443, Sunday, August 30, 2020 18:07:31
[DHCP IP: 10.0.0.14] to MAC address 7c:a1:ae:72:0f:d9, Sunday, August 30, 2020 18:07:24
[DoS Attack: ACK Scan] from source: 103.103.41.88, port 443, Sunday, August 30, 2020 18:04:15
[DHCP IP: 10.0.0.14] to MAC address 7c:a1:ae:72:0f:d9, Sunday, August 30, 2020 17:57:29
[DoS Attack: RST Scan] from source: 13.89.117.20, port 443, Sunday, August 30, 2020 17:56:43
[DHCP IP: 10.0.0.14] to MAC address 7c:a1:ae:72:0f:d9, Sunday, August 30, 2020 17:56:24
[DoS Attack: ACK Scan] from source: 103.103.40.145, port 443, Sunday, August 30, 2020 17:55:45
[DHCP IP: 10.0.0.11] to MAC address cc:6e:a4:4a:7f:72, Sunday, August 30, 2020 17:54:11
[DoS Attack: ACK Scan] from source: 103.103.40.68, port 443, Sunday, August 30, 2020 17:50:09
[DoS Attack: ACK Scan] from source: 52.223.227.178, port 443, Sunday, August 30, 2020 17:46:58
[DHCP IP: 10.0.0.10] to MAC address b4:2e:99:fa:b2:47, Sunday, August 30, 2020 17:46:28
[DHCP IP: 10.0.0.14] to MAC address 7c:a1:ae:72:0f:d9, Sunday, August 30, 2020 17:45:15
[DoS Attack: TCP/UDP Echo] from source: 45.79.82.183, port 52189, Sunday, August 30, 2020 17:42:42
[DHCP IP: 10.0.0.14] to MAC address 7c:a1:ae:72:0f:d9, Sunday, August 30, 2020 17:42:39
[DoS Attack: RST Scan] from source: 3.11.183.67, port 443, Sunday, August 30, 2020 17:39:10
[DoS Attack: ACK Scan] from source: 103.103.41.88, port 443, Sunday, August 30, 2020 17:39:07
[DHCP IP: 10.0.0.11] to MAC address cc:6e:a4:4a:7f:72, Sunday, August 30, 2020 17:29:16
[DHCP IP: 10.0.0.14] to MAC address 7c:a1:ae:72:0f:d9, Sunday, August 30, 2020 17:12:24
[DoS Attack: SYN/ACK Scan] from source: 217.21.52.8, port 25, Sunday, August 30, 2020 17:05:55
[DHCP IP: 10.0.0.11] to MAC address cc:6e:a4:4a:7f:72, Sunday, August 30, 2020 17:04:16
[DoS Attack: RST Scan] from source: 3.11.183.67, port 443, Sunday, August 30, 2020 17:04:06
[DHCP IP: 10.0.0.14] to MAC address 7c:a1:ae:72:0f:d9, Sunday, August 30, 2020 16:51:20
1 Reply
What Firmware version is currently loaded?
What is the Mfr and model# of the Internet Service Providers modem/ONT the NG router is connected too?IF your modem has a built in router, This would be a double NAT (two router) condition which isn't recommended. https://kb.netgear.com/30186/What-is-Double-NAT
https://kb.netgear.com/30187/How-to-fix-issues-with-Double-NAT
Couple of options,
1. Configure the modem for transparent bridge or modem only mode. Then use the Orbi router in router mode. You'll need to contact the ISP for help and information in regards to the modem being bridged correctly.
2. If you can't bridge the modem, disable ALL wifi radios on the modem, configure the modems DMZ/ExposedHost or IP Pass-Through for the IP address the Orbi router gets from the modem. Then you can use the Orbi router in Router mode.
3. Or disable all wifi radios on the modem and connect the Orbi router to the modem, configure AP mode on the Orbi router. https://kb.netgear.com/31218/How-do-I-configure-my-Orbi-router-to-act-as-an-access-point and https://www.youtube.com/watch?v=H7LOcJ8GdDo&app=desktopWhat is the distance between the router and satellite(s)? 30 feet or more is recommended in between RBR and RBS to begin with depending upon building materials when wirelessly connected. https://kb.netgear.com/000036466/How-far-should-I-place-my-Orbi-satellite-from-my-Orbi-router
What channels are you using? Auto? Try setting manual channel 1, 6 or 11 on 2.4Ghz and any unused channel on 5Ghz.
Any Wifi Neighbors near by? If so, how many?Has a factory reset and setup from scratch been performed since last FW update?
