NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
xiimagzx
Oct 21, 2020Guide
(logs) Internet going out once a day
Every day I get one time where the internet comes in and out, Ive talked to my isp they said its not from them and it might be due to something with the firewall in the router setting off the dos att...
- Oct 28, 2020
FOUND THE SOLUTION turn off ddos protection on the router it was giving false reports and causing a issue. I'm haven't had a problem since my last comment on the thread! and that's unheard of before I would have had at least once a day now none!
Mi6300m
Oct 25, 2020Aspirant
Here you go. It dropped 9:37PM PST,10/25/2020
The device in question that dropped was my Google Nest Hub. IP Address 192.168.1.6
[Admin login] from source 192.168.1.11, Sunday, Oct 25,2020 21:37:24 [DHCP IP: (192.168.1.3)] to MAC address 1C:F2:9A:40:C5:C9, Sunday, Oct 25,2020 21:36:56 [DoS attack: Fraggle Attack] from source 10.48.240.1,port 67 Sunday, Oct 25,2020 21:35:35 [DoS attack: ACK Scan] from source 17.253.120.202,port 443 Sunday, Oct 25,2020 21:29:57 [DoS attack: Fraggle Attack] from source 10.48.240.1,port 67 Sunday, Oct 25,2020 21:27:21 [DoS attack: Fraggle Attack] from source 10.48.240.1,port 67 Sunday, Oct 25,2020 21:27:04 [DoS attack: ACK Scan] from source 45.57.40.1,port 443 Sunday, Oct 25,2020 21:25:43 [DHCP IP: (192.168.1.3)] to MAC address 1C:F2:9A:40:C5:C9, Sunday, Oct 25,2020 21:17:54 [DoS attack: ACK Scan] from source 52.26.119.85,port 443 Sunday, Oct 25,2020 21:16:21 [DoS attack: Fraggle Attack] from source 10.48.240.1,port 67 Sunday, Oct 25,2020 21:16:14 [DoS attack: Fraggle Attack] from source 10.48.240.1,port 67 Sunday, Oct 25,2020 21:14:03 [DHCP IP: (192.168.1.11)] to MAC address D4:5D:64:D5:EA:D8, Sunday, Oct 25,2020 21:13:51 [DHCP IP: (192.168.1.11)] to MAC address D4:5D:64:D5:EA:D8, Sunday, Oct 25,2020 21:12:34 [DoS attack: Fraggle Attack] from source 10.48.240.1,port 67 Sunday, Oct 25,2020 21:12:30 [DHCP IP: (192.168.1.11)] to MAC address D4:5D:64:D5:EA:D8, Sunday, Oct 25,2020 21:11:08 [DoS attack: Fraggle Attack] from source 10.48.240.1,port 67 Sunday, Oct 25,2020 21:06:34 [DoS attack: Fraggle Attack] from source 10.48.240.1,port 67 Sunday, Oct 25,2020 21:03:01 [DoS attack: Fraggle Attack] from source 10.48.240.1,port 67 Sunday, Oct 25,2020 21:00:46 [DHCP IP: (192.168.1.16)] to MAC address D6:7A:36:DA:BA:18, Sunday, Oct 25,2020 20:58:45 [DHCP IP: (192.168.1.3)] to MAC address 1C:F2:9A:40:C5:C9, Sunday, Oct 25,2020 20:52:23 [DoS attack: Fraggle Attack] from source 10.48.240.1,port 67 Sunday, Oct 25,2020 20:52:11 [DoS attack: Fraggle Attack] from source 10.48.240.1,port 67 Sunday, Oct 25,2020 20:51:43 [DoS attack: ACK Scan] from source 23.52.229.111,port 443 Sunday, Oct 25,2020 20:51:35 [DoS attack: ACK Scan] from source 23.52.229.111,port 443 Sunday, Oct 25,2020 20:51:20 [DoS attack: Fraggle Attack] from source 10.48.240.1,port 67 Sunday, Oct 25,2020 20:48:45 [DoS attack: Fraggle Attack] from source 10.48.240.1,port 67 Sunday, Oct 25,2020 20:47:29 [DoS attack: Fraggle Attack] from source 10.48.240.1,port 67 Sunday, Oct 25,2020 20:46:16 [DoS attack: Fraggle Attack] from source 10.48.240.1,port 67 Sunday, Oct 25,2020 20:41:37 [DoS attack: Fraggle Attack] from source 10.48.240.1,port 67 Sunday, Oct 25,2020 20:35:25 [DoS attack: Fraggle Attack] from source 10.48.240.1,port 67 Sunday, Oct 25,2020 20:33:58 [DoS attack: Fraggle Attack] from source 10.48.240.1,port 67 Sunday, Oct 25,2020 20:32:30 [DHCP IP: (192.168.1.27)] to MAC address 8C:49:62:64:9B:8C, Sunday, Oct 25,2020 20:32:11 [DoS attack: Fraggle Attack] from source 10.48.240.1,port 67 Sunday, Oct 25,2020 20:31:06 [DHCP IP: (192.168.1.3)] to MAC address 1C:F2:9A:40:C5:C9, Sunday, Oct 25,2020 20:29:35 [DHCP IP: (192.168.1.6)] to MAC address CC:F4:11:AE:6E:35, Sunday, Oct 25,2020 20:28:24 [Log Cleared] Sunday, Oct 25,2020 20:27:32
Netduma-Fraser
Oct 26, 2020NetDuma Partner
Thanks for the log, that was the only device that disconnected? In WAN Settings could you try disabling DoS protection please? I'm thinking multiple entries there are false positives but they may actually be blocking legitimate packets causing a disconnect.
- Mi6300mOct 26, 2020Aspirant
At the time that was the only reported device. Wife told me her Roku Stick went down maybe 10 or so minutes after. I do sometimes notice that my Galaxy Note 10+ (which does support Wi-Fi6) will seem connected but then will only pull data from Cellular while blinking the Wi-Fi icon like it's trying to reconnect.
I'm a little cautious about disabling DoS Protection...but I'll try it in this instance. Is there any more information I can get you?
And just to confirm...this is the lastest firmware available right XR1000 1.0.0.44_1.0.33?
- Mi6300mOct 26, 2020Aspirant
As of 9:06 PST, just sitting and looking through the logs via the GUI, the router completely crashed, TWICE. Redlight on top, other lights still acting as if something is still transmitting.
It crashed while on this page apparently
http://myip/desktop/index.html#com.netdumasoftware.ngportal - Netduma-FraserOct 27, 2020NetDuma PartnerThank you very much for the information, unfortunately I don't have any more recommendations at the moment as it does appear to be a bug. I have made an internal ticket and will get back to you as soon as I have any new information.
Probably the best bet is to downgrade to a previous firmware that may be more stable for you. - Mi6300mOct 27, 2020Aspirant
Unfortunately this firmware is the only one available. No link to the previous one. Don't suppose you could help with that one? ;)
- Netduma-FraserOct 28, 2020NetDuma PartnerI have sent you a Private Message, please check there.
- xiimagzxOct 28, 2020Guide
FOUND THE SOLUTION turn off ddos protection on the router it was giving false reports and causing a issue. I'm haven't had a problem since my last comment on the thread! and that's unheard of before I would have had at least once a day now none!