NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
DoS Attacks
Ever since purchasing my new RAX120 router a couple months ago, I have a recurring problem where everything works fine for a day or two, then the wifi performance degrades significantly or stops altogether. Each time, I either reboot or troubleshoot with Netgear Tech Support and fix the problem, but then it reoccurs a day ot two later. I've even observed where some of my router settings were changed without my doing it (and no one else in my household is able to access the router). Today, I just noticed some of these DoS Attachs in the log. I haven't yet correlated these attacks to when the wifi degrades, but I will check the next time it happens. Are these DoS Attacks anything to be concerned about? I appreciate any feedback anyone has.
[DoS Attack: SYN/ACK Scan] from source: 160.153.137.40, port 80, Saturday, August 01, 2020 11:05:21
[DoS Attack: SYN/ACK Scan] from source: 160.153.137.40, port 80, Saturday, August 01, 2020 09:50:12
[DoS Attack: ACK Scan] from source: 190.191.150.243, port 987, Saturday, August 01, 2020 09:38:21
[DoS Attack: TCP/UDP Chargen] from source: 104.248.173.78, port 48406, Saturday, August 01, 2020 09:32:48
[DoS Attack: UDP Port Scan] from source: 37.49.229.183, port 5160, Saturday, August 01, 2020 09:10:17
[DoS Attack: RST Scan] from source: 185.244.148.107, port 30154, Saturday, August 01, 2020 09:09:47
[DoS Attack: ACK Scan] from source: 74.6.141.28, port 993, Saturday, August 01, 2020 08:30:11
[DoS Attack: TCP/UDP Chargen] from source: 91.239.97.246, port 42645, Saturday, August 01, 2020 07:56:23
2 Replies
Please post about this over in the RAX forum for your model router:
Good Luck.
Netgear's firmware is great at creating false reports of DoS attacks. Many of them are no such thing.
Search - NETGEAR Communities – DoS attacks
Use Whois.net to see who is behind some of them and you may find that they are from places like Facebook, Google, even your ISP.
Here is a useful tool for that task:
IPNetInfo: Retrieve IP Address Information from WHOIS servers
If these events are slowing down your router, that may be because it is using up processor time as it writes the events to your logs. Anything that uses processor power – event logging, QoS management, traffic metering – may cause slowdowns. Disable logging of DoS attacks and see if that reduces the problem. This does not prevent the router from protecting you from the outside world.
