NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
SemperUdellis
Feb 09, 2020Follower
XR500 Router Keeps Resetting
My router keeps resetting. Ranging from 5 minutes apart to days apart. It appears random. But there is almost always a [DoS Attack: ACK Scan] report in the log when it happens. I looked up the most recent IP and it is Amazon. I have put the router on its own power outlet and can confirm it is the correct Power Adapter. I have also noticed, if there is one reset, there are usually more to follow that day. It is rarely one reset. This has been happening for months and I am finally getting to the point where its untolerable.
The attached document is my most resent log after my last reset.
5 Replies
- microchip8Master
By reset you mean you lose all settings or does it just reboot? If the latter, might wanna try a factory reset and reconfigure from scratch
- michaelkenwardGuru - Experienced User
Try the right section for your router.
Nighthawk Pro Gaming Routers - NETGEAR CommunitiesThe DumaOS people monitor it.
- aqxAspirant
If it say's that it is a dos attack. You should be aware that you have the latest update of windows 10. You could also try VPN.
↑basic tips↑
- michaelkenwardGuru - Experienced User
aqx wrote:
If it say's that it is a dos attack.
Or possibly not.
Netgear's firmware is great at creating false reports of DoS attacks. Many of them are no such thing.
Search - NETGEAR Communities – DoS attacks
Use Whois.net to see who is behind some of them and you may find that they are from places like Facebook, Google, even your ISP.
Here is a useful tool for that task:
IPNetInfo: Retrieve IP Address Information from WHOIS servers
If these events are slowing down your router, that may be because it is using up processor time as it writes the events to your logs. Anything that uses processor power – event logging, QoS management, traffic metering – may cause slowdowns. Disable logging of DoS attacks and see if that reduces the problem. This does not prevent the router from protecting you from the outside world.
- Netduma-FraserNetDuma PartnerGood news is it isn't a DDoS attack, it is just showing connections you've come in contact with. As above do you mean factory reset or reboot?