NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

Noda's avatar
Noda
Follower
May 05, 2020

C6250 - DoS attacks coming repeatedly from same ip address

I have been having slow connections issues slow I looked at the logs on my wifi router to see if anything was happening and I discovered that there was a number of DoS attacks coming from the same IP address, I attached a picture. Some additional information includes that the "source" ip is from some company apparently located in ecaudor, and hasn't ever shown up as a connect device on my router, also the "target" ip is always the same, some IT company in Colorado, which I live in New York.

 

Is there anything I can do about this and block the IP or get a new IP all together for my router/mode?. Thanks for any help.

 

 

3 Replies

  • olympos1625's avatar
    olympos1625
    NETGEAR Employee Retired
    Jul 04, 2020

    Hi Noda,


    Good day!

     

    Welcome to NETGEAR Community!

     

    First of all, we do apologize for the inconvenience of not getting back to you immediately due to the back log in the system. Are you still having the same issue? How often do you see the DDoS attack on the router logs?

     

    Please do not hesitate to let me know if you need further assistance. 

     

    Regards,
    Oliver
    Community Team

     

     

    • Tellsworth's avatar
      Tellsworth
      Aspirant
      Jul 09, 2020
      Hi,

      I’ve been experiencing the same issue with my router up to 10-15 times a day. Sometimes the attacks happen and the router gets disconnected. Other times, attacks happen and it stays connected. In the router logs I can see the attacks and the source and target addresses, all external addresses.
  • tcg2ki's avatar
    tcg2ki
    Aspirant
    Sep 13, 2020

    Have you gotten any resolution to your question?

    Noda wrote:

    I have been having slow connections issues slow I looked at the logs on my wifi router to see if anything was happening and I discovered that there was a number of DoS attacks coming from the same IP address, I attached a picture. Some additional information includes that the "source" ip is from some company apparently located in ecaudor, and hasn't ever shown up as a connect device on my router, also the "target" ip is always the same, some IT company in Colorado, which I live in New York.

     

    Is there anything I can do about this and block the IP or get a new IP all together for my router/mode?. Thanks for any help.