NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

rtylerk's avatar
rtylerk
Aspirant
Mar 26, 2021

Newly purchased RAX75/DOS Attacks immediately upon connection as well as...

Hello -

So I just got my router yesterday and it wasnt hard to set up but once i started accessing it via the web GUI, I noticed there were some wierd things happening.. For example: I configured the wireless to have the same name so to be able to use Smart Connect, I clicked apply, it changed the setting and that should be that. For a couple minutes the smart connect was working and then I noticed i couldnt connect to the 5g anymore.. so i plugged a damn lan cable in to discover now the password on the 5g was gone. So I went and looked at the logs and from the minute my network was up I was receving DOS attacks from the same 2 I.P's. Its still goin on nearly 15 hrs later.. Im going to call my ISP and request a wan release and renew but due ot the fact i bought this "RENEWED" off amazon, Im starting to get suspicious. I also found an embedded XML file viewable from a wan software interface that is listed under the RAX75 gatewasy device in "Devices and Printers" The XML is referring to WAN side uPNP and it just so happens I cant un-tick the "Ping Internet Port" to disable it.. Attaching the XML as pdf

3 Replies

Sort By
  • Christian_R's avatar
    Christian_R
    NETGEAR Employee Retired
    Mar 26, 2021

    Hello rtylerk,

     

    If you recently purchased the device I would recommend contacting our support team as newly purchased devices are provided with 90 days of complimentary support. You may open a ticket by registering your device using the link below. 

     

    https://www.netgear.com/support/contact.aspx

     

    Christian 

    • rtylerk's avatar
      rtylerk
      Aspirant
      Mar 26, 2021

      Ok. yeah I did that right after my post here, just thought i would get all the feedback i can.

      Thank you.

       

       

  • antinode's avatar
    antinode
    Guru
    Mar 26, 2021

    > [...] I was receving DOS attacks from the same 2 I.P's. [...]

     

       Which kind(s) of "DOS attacks" from _which_ IP addresses?

     

    > [...] I also found an embedded XML file viewable from a wan software
    > interface [...]

     

       I don't know what that means.  How, exactly, are you viewing this
    thing?

     

    > [...] The XML is referring to WAN side uPNP [...]

     

       The fact that text like "WAN" appears someplace in this thing does
    not mean that the WAN/Internet port on your router is involved.
    Certainly, "192.168.1.1" does not suggest "WAN/Internet" to me.

     

    > [...] I cant un-tick the "Ping Internet Port" to disable it..


       Do you mean ADVANCED > Setup > WAN Setup : Respond to Ping on
    Internet Port?  "ping" uses ICMP, and is unrelated to anything like
    HTTP.  That option should do what it says that it does, which seems to
    be unrelated to whatever you expect it to do.