NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
nebhead
Jun 12, 2020Tutor
RAX75 hanging after latest firmware update
The router started crashing as of yesterday, and becomes unresponsive to the webui (@192.168.1.1) or the Nighthawk Android App. I noticed that the firmware updated recently to firmware V1.0.3.88_1.0...
michaelkenward
Jun 12, 2020Guru - Experienced User
nebhead wrote:
I looked at the logs and I do see some suspicious log entries that I don't recall seeing before, for example:
[DoS attack: TCP SYN Flood] from source 87.251.75.51,port 65532 Thursday, Jun 11,2020 17:56:20
[DoS attack: ACK Scan] from source 3.93.179.0,port 2350 Thursday, Jun 11,2020 17:52:11
[DoS attack: ACK Scan] from source 52.88.22.0,port 443 Thursday, Jun 11,2020 17:48:47
Netgear's firmware is great at creating false reports of DoS attacks. Many of them are no such thing.
Search - NETGEAR Communities – DoS attacks
Use Whois.net to see who is behind some of them and you may find that they are from places like Facebook, Google, even your ISP. Yours seem to be from Amazon.
Here is a useful tool for that task:
IPNetInfo: Retrieve IP Address Information from WHOIS servers
If these events are slowing down your router, or maybe even causing the crashes you see, that may be because it is using up processor time as it writes the events to your logs. Anything that uses processor power – event logging, QoS management, traffic metering, n ot to mention Armor and Circle – may cause slowdowns. Disable logging of DoS attacks and see if that reduces the problem. This does not prevent the router from protecting you from the outside world.