NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
tim45
Jun 07, 2021Aspirant
XR1000 DoS attack issues
Im having a lot of consitent messages pop up recently in the system information, my ping now spikes ridiclously (was 40-50 now 70-100) to 300+. any help would be appreciated. logs [Time synch...
michaelkenward
Jun 07, 2021Guru - Experienced User
Netgear's firmware is great at creating false reports of DoS attacks. Many of them are no such thing.
Search - NETGEAR Communities – DoS attacks
Use Whois.net to see who is behind some of them and you may find that they are from places like Facebook, Google, even your ISP.
Here is a useful tool for that task:
IPNetInfo: Retrieve IP Address Information from WHOIS servers
Most of your "attacks" are from Google and Amazon, with Microsoft thrown in for good measure.
If these events are slowing down your router, that may be because it is using up processor time as it writes the events to your logs. Anything that uses processor power – event logging, QoS management, traffic metering – may cause slowdowns. Disable logging of DoS attacks and see if that reduces the problem. This does not prevent the router from protecting you from the outside world.
You have posted your message in the section of this community given over to Nighthawk WiFi Routers. (This is easily done, given Netgear's complicated community structure.)
Many questions apply to different types of device, so you might get responses here, but you might get more help, and find earlier questions and answers specific to your hardware, in the appropriate section for your device. That's probably here:
Nighthawk Pro Gaming Routers - NETGEAR Communities
I will ask the Netgear moderator to move your message.
In the meantime you could visit the support pages:
Support | NETGEAR
Feed in your model number and check the documentation for your hardware.
You may have done this already. I can't tell from your message.
I mention it because Netgear gave up on supplying paper manuals years ago and people sometimes miss the downloads.
tim45
Jun 07, 2021Aspirant
I have checked the IP of a few of the reports and it seems that it comes from a Corp not like google and what not. I’ve had an IP that didn’t pop up so I was thinking maybe it is spoofed.
I will have to try and take of the scripts when I get home from work. Appreciate the thoughtfulness of your message
I will have to try and take of the scripts when I get home from work. Appreciate the thoughtfulness of your message
- michaelkenwardJun 07, 2021Guru - Experienced User
tim45 wrote:
I have checked the IP of a few of the reports and it seems that it comes from a Corp not like google and what not.Many of those "corps" rely on the Amazons of the world for their services.