NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

Rathen88's avatar
Rathen88
Aspirant
Apr 04, 2023

DOS Attack - The Journey Of Router Security Thread

To begin with, I was told about the DOS attack before I realized I was under attack. The source, a petulant man child that lives next door to me. My crime, complaining about the noise he generated when his parents were away. My ISP recognizes the attack but can't do anything just yet, without the original IP.

 

I stopped the attack by purchasing a third party router and taking my router offline and using wired connections only. But eventually I noticed remote logins to that system and purchased a netgear instead for better router logs.

 

I was always more interested in the "How" and now that the router gives me logs of exactly what's going I figured I'd create a blog of sorts and what router settings I need to adjust.

So far the router has logged the following attacks uder DOS.

Fraggle & Ack Scan

 

What settings should I adjust in order to prevent these intrustions?

10 Replies

  • The logs are very sensitive, you could be browsing the internet normally and it would think the website is mounting an attack on you. I'd check the IP it shows online and see where it's coming from/who it belongs to to double check.
  • FURRYe38's avatar
    FURRYe38
    Guru - Experienced User

    What NG router model do you have? 


    Rathen88 wrote:

    To begin with, I was told about the DOS attack before I realized I was under attack. The source, a petulant man child that lives next door to me. My crime, complaining about the noise he generated when his parents were away. My ISP recognizes the attack but can't do anything just yet, without the original IP.

     

    I stopped the attack by purchasing a third party router and taking my router offline and using wired connections only. But eventually I noticed remote logins to that system and purchased a netgear instead for better router logs.

     

    I was always more interested in the "How" and now that the router gives me logs of exactly what's going I figured I'd create a blog of sorts and what router settings I need to adjust.

    So far the router has logged the following attacks uder DOS.

    Fraggle & Ack Scan

     

    What settings should I adjust in order to prevent these intrustions?


     

    • Rathen88's avatar
      Rathen88
      Aspirant

      Netdumar: I understand the skepticism and I've read up on netgear false positives and understand that that is an issue. The difference here is that I was told about the attempts and actual hack prior to even understanding that my internet was targeted. I thought it was the ISP. My ISP has confirmed the DOS.

       

      I've created this thread for solutions because of the persistence but more importantly for myself and others to learn.

       

      Furrry. I'm using the XR1000

      • Netduma-Fraser's avatar
        Netduma-Fraser
        NetDuma Partner
        Are the logins still occurring? As you can't really do anything about those attacks/scans but the firewall on the router should prevent it becoming a large issue