NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
dos attack by ISP?
Hello, I have been having trouble with my nighthawk. Today I had cox come out to fix an issues to me losing internet random for about 20 seconds. The guy took off a filter that is inbetween the mode...
So the problem is fixed!! :) I am posting this so if anyone has the same problem they can fix it too. First things first the router and/or the equipment was not the problem. The problem was cox sent out dip**bleep** techs to my house over and over. When calling cox the last time I told them my modems power signals were not looking correct and told them about my modems logs. Ask your ISP for i believe what they call a "Data Tech" this tech actually knew what the **bleep** they were doing and fixed the issues. I had been dealing with this problem for over a year and it took the tech 30 minutes to fix my problem. So in ending this topic after the tons of hours looking on the internet and wasting my time JUST CALL YOUR ISP and have them fix the problem if your logs and symptoms are the same as mine, do not waste your time. Hopefullly this helps someone else out.
these were the errors my modem was giving to look my modems logs i typed 192.168.100.1 in the search bar:
2016-11-15, 20:48:43 Critical (3) Unicast Ranging Received Abort Response - Re-initializing MAC;CM-MAC=40:5d:82:e5:26:a0;CMTS-MAC=00:1e:be:ff:28:b0;CM-QOS=1.1;CM-VER=3.0;
2016-11-15, 20:48:57 Warning (5) Dynamic Range Window violation
Probably I'm not very helpful since it's been ages since I used the stock firmware, but if it supports disabling DoS protection, then do it. Also, NG's DoS detection is seriously flawed and reports many false positives as correct
Alright i will disable dos protection and see it that fixes it. fingers crossed.
after disabling dos protection i seem to be dropping internet more frequent. i downgrade to V1.0.5.70_1.1.91 and same thing is happening. i dont know what else to do.....
Try V1.0.4.30 and or internet setup....Use Pc Mac address.... changing the MAC should change your Public IP
Have you tried a different cable between the modem and router?
Sometimes you can get to the modem and see its log. In my case I can, it is an ISP provided Surfboard SB6141 and if I enter 192.168.100.1 into a browser I can see it. If that works and you can see a LOG tab, check it out for yourself.
Oh, for month I've not seen any attacks (I get logs emailed to me daily) and today I see it happened twice yesterday.
[DoS attack: Smurf] attack packets in last 20 sec from ip [184.88.19.241], Wednesday, Nov 09,2016 17:01:13
[DoS attack: ACK Scan] attack packets in last 20 sec from ip [52.7.238.134], Wednesday, Nov 09,2016 09:02:42
First is Time Warner, which my ISP uses for email (Road Runner). Second is Amazon. I used this site, https://www.ultratools.com/tools/ipWhoisLookupResult to look them up. Neither is a real attack.
i have tried multiple cables and same thing whats weird is my connection is more stable with dos protection on?
