NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
DoS Attack: RST Scan Multiple IP addresses with loss of service
CM1000 modem and RBR50 router with Firmware V2.7.2.104 Windows 7 &10, Android and iPhone home network. Constant dropping internet connection with DNS can not find server. ISP Spectrum says its the mo...
Netgear's firmware is great at creating false reports of DoS attacks. Many of them are no such thing.
Search - NETGEAR Communities – DoS attacks
Use Whois.net to see who is behind some of them and you may find that they are from places like Facebook, Google, even your ISP.
Here is a useful tool for that task:
IPNetInfo: Retrieve IP Address Information from WHOIS servers
If these events are slowing down your router, that may be because it is using up processor time as it writes the events to your logs. Anything that uses processor power – event logging, QoS management, traffic metering – may cause slowdowns. Disable logging of DoS attacks and see if that reduces the problem. This does not prevent the router from protecting you from the outside world.
Attached are the IP look ups from the attacks from 3-29-2021. Thay are from all over and not face book or google.
[DoS Attack: RST Scan] from source: 194.147.140.111, port 49564, Monday, March 29, 2021 15:58:20
[DoS Attack: RST Scan] from source: 194.147.140.53, port 41620, Monday, March 29, 2021 15:52:03
[DoS Attack: SYN/ACK Scan] from source: 54.81.84.215, port 443, Monday, March 29, 2021 15:50:00
[DoS Attack: SYN/ACK Scan] from source: 24.125.148.115, port 80, Monday, March 29, 2021 15:49:58
[DoS Attack: RST Scan] from source: 194.147.140.53, port 41620, Monday, March 29, 2021 15:43:55
[DoS Attack: SYN/ACK Scan] from source: 198.55.127.40, port 25565, Monday, March 29, 2021 15:24:54