NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

Retired_Member's avatar
Retired_Member
Aug 29, 2021

Barrage of DoS attacks from legitimate sources

After buying and switching to an new Router, we have constant DOS attacks from our supposed service provider aswell as Google, Github and our service provider, with the same 4 IP addresses every that are slightly different to our IP address, exactly every 30-40 seconds using Fraggle Attack from port 2190, with occasional ACK scans using port 443, I have tried changing the DNS server (aswell as using the service provider DNS), resetting settings and rebooting the router, nothing has worked.

 

[DoS attack: Fraggle Attack] from source ~~.155.210.36,port 2190 Thursday, Aug 26,2021 09:11:06
[DoS attack: Fraggle Attack] from source ~~.155.211.248,port 2190 Thursday, Aug 26,2021 09:11:06
[DoS attack: Fraggle Attack] from source ~~.155.211.15,port 2190 Thursday, Aug 26,2021 09:10:44
[DoS attack: Fraggle Attack] from source ~~.155.210.176,port 2190 Thursday, Aug 26,2021 09:10:44
 
 
[DoS attack: ACK Scan] from source 185.199.109.154,port 443 Thursday, Aug 26,2021 09:05:06
[DoS attack: ACK Scan] from source 173.194.73.108,port 993 Thursday, Aug 26,2021 09:09:26
[DoS attack: ACK Scan] from source 34.120.243.77,port 443 Thursday, Aug 26,2021 09:02:33
 
I have read Netgear's DoS protection is full of false positives and many users also experience attacks from port 2190, but this never happened (at this scale) with our older router

16 Replies

  • DexterJB's avatar
    DexterJB
    NETGEAR Moderator

    Hi Retired_Member, which model and firmware version is your NETEGAR device?

    • Retired_Member's avatar
      Retired_Member

       


      DexterJB wrote:

      Hi Retired_Member, which model and firmware version is your NETEGAR device?


      RAX50, Firmware Version  V1.0.2.82_2.0.50

      • DarrenM's avatar
        DarrenM
        Sr. NETGEAR Moderator

        They could be false positives are the DOS attacks causing any performance issues?

         

        DarrenM