NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

Sp4's avatar
Sp4
Guide
Feb 24, 2021

DDOS Attacks

I have a NightHawk XR500 router and the logs report I am getting constant DOS attacks. Now I am interested in getting a hardware firewall. I see Netgear offers the Insight Managed Business Router (BR...
Sp4's avatar
Sp4
Guide
Feb 26, 2021

Thank you for your response. I powered off all my network devices and only left my router connected to the internet. These supposed Dos attacks were still getting reported by the router even when nothing else was connected. I also had my ISP change my IP address. The router is still reporting these attacks. I'm kinda at a loss right now with whats going on. I havent had a chance to spend too much time investigating all the IP addresses my router was reporting as a DoS attacks. The handfull I looked up all offered some kind of internet security. So at this moment I'm not sure if the reported IPs are just servers the attack is passing through or not. I would assume anyone doing any real DoS attacks would pass the network traffic through multiple VPNs and servers to mask their real identity. I know my NightHawk has good security I was just interesed in seeing if I could beef it up a bit. If I come across any new info I'll share it, but I know this isnt the proper forum to discuss how to deal with DoS attacks.

schumaku's avatar
schumaku
Guru - Experienced User
Feb 27, 2021

Would be interesting to see a representative selection of the reported DoS...

 

 

  • Sp4's avatar
    Sp4
    Guide
    Feb 28, 2021

    [DoS Attack: TCP/UDP Chargen] from source: 46.166.187.81, port 47946, Wednesday, February 24, 2021 17:18:54
    [DoS Attack: SYN/ACK Scan] from source: 116.203.85.245, port 25565, Wednesday, February 24, 2021 17:19:55
    [DoS Attack: TCP/UDP Chargen] from source: 37.49.230.190, port 60524, Wednesday, February 24, 2021 17:23:53
    [DoS Attack: ACK Scan] from source: 184.84.244.17, port 443, Wednesday, February 24, 2021 23:19:27
    [DoS Attack: ACK Scan] from source: 184.84.244.17, port 443, Wednesday, February 24, 2021 23:18:49
    [DoS Attack: SYN/ACK Scan] from source: 50.3.111.104, port 22, Wednesday, February 24, 2021 23:05:56
    [DoS Attack: ACK Scan] from source: 172.126.19.100, port 53, Wednesday, February 24, 2021 22:35:21
    [DoS Attack: ACK Scan] from source: 110.138.84.58, port 50306, Wednesday, February 24, 2021 22:20:19
    [DoS Attack: ACK Scan] from source: 110.138.84.58, port 50304, Wednesday, February 24, 2021 22:20:19
    [DoS Attack: ACK Scan] from source: 184.84.244.59, port 443, Wednesday, February 24, 2021 21:19:26
    [DoS Attack: ACK Scan] from source: 23.33.85.237, port 443, Thursday, February 25, 2021 03:48:00
    [DoS Attack: ACK Scan] from source: 23.33.85.237, port 443, Thursday, February 25, 2021 03:47:16
    [DoS Attack: ACK Scan] from source: 23.33.85.237, port 443, Thursday, February 25, 2021 03:46:54
    [DoS Attack: SYN/ACK Scan] from source: 121.36.240.158, port 3389, Thursday, February 25, 2021 03:28:22
    [DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 03:12:10
    [DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 03:12:05
    [DoS Attack: SYN/ACK Scan] from source: 51.89.176.230, port 22, Thursday, February 25, 2021 02:47:25
    [DoS Attack: SYN/ACK Scan] from source: 45.43.15.238, port 25565, Thursday, February 25, 2021 02:47:07
    [DoS Attack: SYN/ACK Scan] from source: 51.89.176.230, port 22, Thursday, February 25, 2021 02:45:40
    [DoS Attack: SYN/ACK Scan] from source: 51.89.176.230, port 22, Thursday, February 25, 2021 02:43:30
    [DoS Attack: TCP/UDP Chargen] from source: 184.105.139.89, port 38084, Thursday, February 25, 2021 01:49:36
    [DoS Attack: TCP/UDP Chargen] from source: 162.220.165.204, port 48143, Thursday, February 25, 2021 01:13:01
    [DoS Attack: SYN/ACK Scan] from source: 64.67.120.198, port 80, Thursday, February 25, 2021 01:06:33
    [DoS Attack: SYN/ACK Scan] from source: 64.67.120.198, port 80, Thursday, February 25, 2021 01:06:23
    [DoS Attack: SYN/ACK Scan] from source: 64.67.120.198, port 80, Thursday, February 25, 2021 01:06:22
    [DoS Attack: SYN/ACK Scan] from source: 64.67.120.198, port 80, Thursday, February 25, 2021 01:06:17
    [DoS Attack: SYN/ACK Scan] from source: 51.83.217.214, port 49230, Thursday, February 25, 2021 09:17:43
    [DoS Attack: SYN/ACK Scan] from source: 216.56.63.130, port 10443, Thursday, February 25, 2021 09:04:17
    [DoS Attack: SYN/ACK Scan] from source: 216.56.63.130, port 10443, Thursday, February 25, 2021 09:04:17
    [DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 08:47:01
    [DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 08:29:19
    [DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 08:11:17
    [DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 08:10:16
    [DoS Attack: SYN/ACK Scan] from source: 51.255.4.74, port 6667, Thursday, February 25, 2021 07:59:21
    [DoS Attack: SYN/ACK Scan] from source: 160.153.136.3, port 80, Thursday, February 25, 2021 07:53:15
    [DoS Attack: ACK Scan] from source: 107.162.170.45, port 80, Thursday, February 25, 2021 07:49:20
    [DoS Attack: ACK Scan] from source: 107.162.170.45, port 80, Thursday, February 25, 2021 07:46:06
    [DoS Attack: ACK Scan] from source: 107.162.170.45, port 80, Thursday, February 25, 2021 07:43:03
    [DoS Attack: ACK Scan] from source: 107.162.170.45, port 80, Thursday, February 25, 2021 07:42:22
    [DoS Attack: ACK Scan] from source: 107.162.170.45, port 80, Thursday, February 25, 2021 07:39:34
    [DoS Attack: ACK Scan] from source: 107.162.170.45, port 80, Thursday, February 25, 2021 07:39:10
    [DoS Attack: ACK Scan] from source: 107.162.170.45, port 80, Thursday, February 25, 2021 07:37:36
    [DoS Attack: ACK Scan] from source: 107.162.170.45, port 80, Thursday, February 25, 2021 07:35:34
    [DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 07:32:04
    [DoS Attack: ACK Scan] from source: 67.183.211.22, port 53, Thursday, February 25, 2021 07:26:18
    [DoS Attack: ACK Scan] from source: 107.162.170.45, port 80, Thursday, February 25, 2021 07:19:17
    [DoS Attack: ACK Scan] from source: 107.162.170.45, port 80, Thursday, February 25, 2021 07:16:18
    [DoS Attack: ACK Scan] from source: 107.162.170.45, port 80, Thursday, February 25, 2021 07:02:35
    [DoS Attack: SYN/ACK Scan] from source: 103.212.158.163, port 22, Thursday, February 25, 2021 06:56:53
    [DoS Attack: ACK Scan] from source: 107.162.170.45, port 80, Thursday, February 25, 2021 06:20:19
    [DoS Attack: ACK Scan] from source: 107.162.170.45, port 80, Thursday, February 25, 2021 06:18:09
    [DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 06:09:54
    [DoS Attack: SYN/ACK Scan] from source: 47.39.38.76, port 80, Thursday, February 25, 2021 06:08:57
    [DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 05:33:10
    [DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 05:24:58
    [DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 05:24:24
    [DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 05:12:26
    [DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 05:10:20
    [DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 05:03:41
    [DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 05:03:17
    [DoS Attack: SYN/ACK Scan] from source: 54.37.128.153, port 27015, Thursday, February 25, 2021 05:00:00
    [DoS Attack: RST Scan] from source: 18.204.230.237, port 7070, Thursday, February 25, 2021 04:47:31
    [DoS Attack: ACK Scan] from source: 69.140.244.127, port 80, Thursday, February 25, 2021 04:41:22
    [DoS Attack: RST Scan] from source: 3.126.23.211, port 8801, Thursday, February 25, 2021 04:41:10
    [DoS Attack: ACK Scan] from source: 69.140.244.127, port 80, Thursday, February 25, 2021 04:37:54
    [DoS Attack: TCP/UDP Chargen] from source: 45.130.138.106, port 37961, Thursday, February 25, 2021 04:35:39
    [DoS Attack: SYN/ACK Scan] from source: 104.198.14.52, port 80, Thursday, February 25, 2021 04:18:23
    [DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 04:17:32
    [DoS Attack: SYN/ACK Scan] from source: 178.238.47.107, port 80, Thursday, February 25, 2021 04:14:27
    [DoS Attack: SYN/ACK Scan] from source: 54.37.129.99, port 34533, Thursday, February 25, 2021 04:12:41
    [DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 03:56:53
    [DoS Attack: SYN/ACK Scan] from source: 51.83.217.214, port 49230, Thursday, February 25, 2021 19:36:58
    [DoS Attack: SYN/ACK Scan] from source: 104.21.57.186, port 443, Thursday, February 25, 2021 19:33:04
    [DoS Attack: SYN/ACK Scan] from source: 104.21.57.186, port 443, Thursday, February 25, 2021 19:33:03
    [DoS Attack: TCP/UDP Chargen] from source: 146.88.240.4, port 49191, Thursday, February 25, 2021 19:32:01
    [DoS Attack: SYN/ACK Scan] from source: 35.199.126.88, port 80, Thursday, February 25, 2021 19:30:55
    [DoS Attack: TCP/UDP Echo] from source: 141.212.123.26, port 38202, Thursday, February 25, 2021 19:28:14
    [DoS Attack: SYN/ACK Scan] from source: 104.18.101.40, port 443, Thursday, February 25, 2021 17:44:52
    [DoS Attack: SYN/ACK Scan] from source: 104.18.101.40, port 443, Thursday, February 25, 2021 17:44:51
    [DoS Attack: RST Scan] from source: 43.249.195.156, port 39003, Thursday, February 25, 2021 17:43:45
    [DoS Attack: RST Scan] from source: 43.249.195.156, port 39003, Thursday, February 25, 2021 17:43:45
    [DoS Attack: SYN/ACK Scan] from source: 103.95.221.0, port 80, Thursday, February 25, 2021 17:40:35
    [DoS Attack: SYN/ACK Scan] from source: 54.38.192.109, port 13523, Thursday, February 25, 2021 17:24:16
    [DoS Attack: SYN/ACK Scan] from source: 172.217.10.14, port 443, Thursday, February 25, 2021 17:08:25
    [DoS Attack: SYN/ACK Scan] from source: 172.217.10.14, port 443, Thursday, February 25, 2021 17:07:02
    [DoS Attack: SYN/ACK Scan] from source: 185.254.99.69, port 30130, Thursday, February 25, 2021 17:02:34
    [DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:53:04
    [DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:52:36
    [DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:52:35
    [DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:52:16
    [DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:52:16
    [DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:52:09
    [DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:52:08
    [DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:51:59
    [DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:51:57
    [DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:51:34
    [DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:51:33
    [DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:51:31
    [DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:51:30
    [DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:51:29
    [DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:51:26
    [DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:51:25
    [DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:51:25
    [DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:51:24
    [DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:51:17
    [DoS Attack: SYN/ACK Scan] from source: 2.17.37.152, port 443, Thursday, February 25, 2021 16:43:24
    [DoS Attack: SYN/ACK Scan] from source: 40.114.234.93, port 60, Thursday, February 25, 2021 16:26:08
    [DoS Attack: SYN/ACK Scan] from source: 94.23.134.247, port 443, Thursday, February 25, 2021 16:17:45
    [DoS Attack: SYN/ACK Scan] from source: 185.254.99.69, port 30130, Thursday, February 25, 2021 15:55:32
    [DoS Attack: SYN/ACK Scan] from source: 185.254.99.69, port 30130, Thursday, February 25, 2021 15:54:52
    [DoS Attack: SYN/ACK Scan] from source: 51.89.16.248, port 2100, Sunday, February 28, 2021 15:02:36
    [DoS Attack: TCP/UDP Chargen] from source: 157.90.92.101, port 40887, Sunday, February 28, 2021 14:55:07
    [DoS Attack: ACK Scan] from source: 86.3.28.89, port 80, Sunday, February 28, 2021 14:50:45
    [DoS Attack: SYN/ACK Scan] from source: 172.67.222.17, port 80, Sunday, February 28, 2021 14:48:47
    [DoS Attack: SYN/ACK Scan] from source: 172.67.222.17, port 80, Sunday, February 28, 2021 14:48:46
    [DoS Attack: TCP/UDP Chargen] from source: 198.144.159.119, port 44037, Sunday, February 28, 2021 14:41:14
    [DoS Attack: SYN/ACK Scan] from source: 51.79.162.110, port 27586, Sunday, February 28, 2021 14:19:28
    [DoS Attack: SYN/ACK Scan] from source: 172.67.222.17, port 80, Sunday, February 28, 2021 14:12:39
    [DoS Attack: SYN/ACK Scan] from source: 172.67.222.17, port 80, Sunday, February 28, 2021 14:12:38
    [DoS Attack: SYN/ACK Scan] from source: 51.79.162.110, port 19314, Sunday, February 28, 2021 14:10:48
    [DoS Attack: SYN/ACK Scan] from source: 54.36.178.5, port 25565, Sunday, February 28, 2021 14:09:17
    [DoS Attack: SYN/ACK Scan] from source: 51.79.162.110, port 29783, Sunday, February 28, 2021 14:08:02
    [DoS Attack: SYN/ACK Scan] from source: 51.79.162.110, port 55893, Sunday, February 28, 2021 14:06:46
    [DoS Attack: SYN/ACK Scan] from source: 54.37.196.8, port 30120, Sunday, February 28, 2021 13:59:12
    [DoS Attack: SYN/ACK Scan] from source: 54.36.178.5, port 25565, Sunday, February 28, 2021 13:59:01
    [DoS Attack: SYN/ACK Scan] from source: 193.70.117.31, port 30120, Sunday, February 28, 2021 13:55:23