NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

TheGoz's avatar
TheGoz
Follower
Oct 02, 2016

iPhone 6S Sends DoS to NetGear

I found evidence that my iPhone 6S is the cause of the DoS attacks on my NetGear C3000-100NAS. The iPhone connects and then instead of a local 192.168.0.x address, it gets a strange WAN address and the attacks like the ones below begin immediately:

[DoS attack: Ping Of Death] from 7.4.241.224, port 01Sat Oct 01 20:35:21 2016221.135.76.83:07.4.241.224:0
[DoS attack: Teardrop or derivative] from 7.4.241.224, port 01Sat Oct 01 20:35:21 2016221.135.76.83:07.4.241.224:0
[DoS attack: Ping Of Death] from 7.4.241.224, port 01Sat Oct 01 20:35:21 2016221.135.76.83:07.4.241.224:0

 

 

I've been able to minimize the impact of this by taking these steps:

 

  • Log into the Netgear admin before turning on wifi on the iPhone
  • Monitor the iPhone as it connects to the Netgear. If it picks up a WAN address, immediately turn off wifi on the iPhone.
  • If it picks up a local address, it's OK.

This is not a long term fix. The following attempts have not worked:

  • There's no firmware update for the iPhone to date
  • There's no firmware update to the Netgear to date
  • Factory resetting the iPhone was a 100% waste of time in this case
  • Giving the iPhone a reserved IP address on the Netgear was a 100% waste of time
  • Reporting it to ComCast was an absolute complete 100% waste of LOTS OF TIME

We have to group think this one, folks, so contribute. Thanks.

dos attack
iPhone 6s
Troubleshooting

1 Reply

  • dezmodious's avatar
    dezmodious
    Aspirant
    Oct 26, 2016

    I have run into this issue as well. I just purchase the c7000 today and withing minutes of setting it up (yes I changed the default settings and passwords) and browsing around the admin settings I noticed that my log was showing DoS attacks: Ping of Death, Teardrop...etc. All were coming from ip address 78.197.43.0 port 0 (shows France when googled). When I checked connected devices I had one device with that particular IP assignment. I determined it was my Iphone 6S. I switched it over to the 5G network and that solved it for that device. I checked back a few minutes later and I now have the same ip address showing in the connected devices but it is no longer my iphone, it's just an undefined device (listed as ---). Does not appear to be affecting speed or connectivity at the moment

     

    For reference, Time Warner customer in Raleigh, NC