NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Netgear XR500 Dos Attack
Good Day Everyone,
I recently got a new gateway from my isp. Plugged everything in and set it up in bridge mode. Noticed slow speeds so I opend up the router ui and checked logs page. All I am seeing inside the logs page is dos attack. I never had this issue before and have tried everything. Factory reset, software downgrade, a different gateway, static and dynamic ip. Still doing all that did not change a thing. When I plug my computer directly into the gateway everything works fine.
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:07:38
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:05:38
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:03:38
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:02:24
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:02:19
[DoS Attack: ACK Scan] from source: 131.188.12.211, port 80, Thursday, December 23, 2021 12:01:44
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:01:40
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:01:20
[DoS Attack: ACK Scan] from source: 131.188.12.211, port 80, Thursday, December 23, 2021 12:01:20
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:01:10
[DoS Attack: ACK Scan] from source: 131.188.12.211, port 80, Thursday, December 23, 2021 12:01:07
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:01:01
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:01:01
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:01:01
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:01:01
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:01:01
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:01:01
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:01:01
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:01:01
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:01:01
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:00:24
[DoS Attack: ACK Scan] from source: 131.188.12.211, port 80, Thursday, December 23, 2021 11:59:45
[DoS Attack: ACK Scan] from source: 198.166.40.25, port 8080, Thursday, December 23, 2021 11:59:45
[DoS Attack: ACK Scan] from source: 131.188.12.211, port 80, Thursday, December 23, 2021 11:59:33
[DoS Attack: ACK Scan] from source: 79.124.67.90, port 80, Thursday, December 23, 2021 11:59:27
[DoS Attack: ACK Scan] from source: 79.124.67.90, port 80, Thursday, December 23, 2021 11:59:27
[DoS Attack: ACK Scan] from source: 149.201.240.100, port 80, Thursday, December 23, 2021 11:59:27
[DoS Attack: ACK Scan] from source: 131.188.12.211, port 80, Thursday, December 23, 2021 11:59:27
[DoS Attack: ACK Scan] from source: 91.210.88.42, port 80, Thursday, December 23, 2021 11:59:27
[DoS Attack: ACK Scan] from source: 131.188.12.211, port 80, Thursday, December 23, 2021 11:59:25
[DoS Attack: ACK Scan] from source: 131.188.12.211, port 80, Thursday, December 23, 2021 11:59:25
[DoS Attack: ACK Scan] from source: 192.38.78.162, port 80, Thursday, December 23, 2021 11:59:23
[DoS Attack: ACK Scan] from source: 193.50.6.155, port 80, Thursday, December 23, 2021 11:59:23
[DoS Attack: ACK Scan] from source: 157.131.224.201, port 80, Thursday, December 23, 2021 11:59:17
[DoS Attack: ACK Scan] from source: 89.102.0.150, port 80, Thursday, December 23, 2021 11:59:17
[DoS Attack: ACK Scan] from source: 128.153.145.19, port 80, Thursday, December 23, 2021 11:59:11
[DoS Attack: ACK Scan] from source: 198.60.22.13, port 80, Thursday, December 23, 2021 11:59:11
[DoS Attack: ACK Scan] from source: 198.60.22.13, port 80, Thursday, December 23, 2021 11:59:11
[DoS Attack: ACK Scan] from source: 140.247.173.13, port 80, Thursday, December 23, 2021 11:59:10
[DoS Attack: ACK Scan] from source: 157.131.224.201, port 80, Thursday, December 23, 2021 11:59:09
[DoS Attack: ACK Scan] from source: 213.174.147.249, port 80, Thursday, December 23, 2021 11:59:09
[DoS Attack: ACK Scan] from source: 213.174.147.249, port 80, Thursday, December 23, 2021 11:59:09
[DoS Attack: ACK Scan] from source: 208.81.1.244, port 80, Thursday, December 23, 2021 11:59:06
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 11:59:04
[DoS Attack: ACK Scan] from source: 140.247.173.13, port 80, Thursday, December 23, 2021 11:59:04
[DoS Attack: ACK Scan] from source: 208.81.1.244, port 80, Thursday, December 23, 2021 11:59:04
[DoS Attack: ACK Scan] from source: 208.81.1.244, port 80, Thursday, December 23, 2021 11:59:02
[DoS Attack: ACK Scan] from source: 157.131.224.201, port 80, Thursday, December 23, 2021 11:59:01
[DoS Attack: ACK Scan] from source: 147.75.69.165, port 80, Thursday, December 23, 2021 11:59:01
[DoS Attack: ACK Scan] from source: 157.131.224.201, port 80, Thursday, December 23, 2021 11:59:01
[DoS Attack: ACK Scan] from source: 204.16.246.250, port 80, Thursday, December 23, 2021 11:59:00
[DoS Attack: ACK Scan] from source: 157.131.224.201, port 80, Thursday, December 23, 2021 11:59:00
[DoS Attack: ACK Scan] from source: 198.166.40.25, port 8080, Thursday, December 23, 2021 11:59:00
[DoS Attack: ACK Scan] from source: 208.81.1.244, port 80, Thursday, December 23, 2021 11:59:00
[DoS Attack: ACK Scan] from source: 198.60.22.13, port 80, Thursday, December 23, 2021 11:58:58
[DoS Attack: ACK Scan] from source: 128.211.151.252, port 80, Thursday, December 23, 2021 11:58:56
[DoS Attack: ACK Scan] from source: 216.17.3.16, port 80, Thursday, December 23, 2021 11:58:52
[DoS Attack: ACK Scan] from source: 216.17.3.16, port 80, Thursday, December 23, 2021 11:58:52
[DoS Attack: ACK Scan] from source: 38.229.66.100, port 80, Thursday, December 23, 2021 11:58:51
[DoS Attack: ACK Scan] from source: 38.229.66.100, port 80, Thursday, December 23, 2021 11:58:51
[DoS Attack: ACK Scan] from source: 69.65.16.171, port 80, Thursday, December 23, 2021 11:58:50
[DoS Attack: ACK Scan] from source: 69.65.16.171, port 80, Thursday, December 23, 2021 11:58:50
1 Reply
- It's a known experience where the XR reports connections you make as DoS attacks but please be reassured you're not being attacked, they're false flags.
The speed issue will likely be because you haven't yet set your expected speeds in bandwidth settings or you've lowered Congestion Control on the QoS page
