mr60 DOS ATTACK ACK SCAN

---

SRAS23 wrote:

Getting into the system logs I noticed there were several "DoS Attack ACK Scan" events listed. After quick research this has led me to realize Netgear sucks and has had a regular problem with false events like such on their devices. I visit Amazon and get:

 

[DoS attack: Fraggle Attack] from source 96.120.103.145,port 67 Monday, Jul 26,2021 11:09:33
[DoS attack: ACK Scan] from source 142.251.33.99,port 443 Monday, Jul 26,2021 11:08:47

 

---

I am not familiar with the MR60 – this is the wrong place to talk about it – but I am familiar with those messages.

Netgear's firmware is great at creating false reports of DoS attacks. Many of them are no such thing.

Search - NETGEAR Communities – DoS attacks

Use Whois.net to see who is behind some of them and you may find that they are from places like Facebook, Google, even your ISP.

Here is a useful tool for that task:

IPNetInfo: Retrieve IP Address Information from WHOIS servers

If these events are slowing down your router, that may be because it is using up processor time as it writes the events to your logs. Anything that uses processor power – event logging, QoS management, traffic metering – may cause slowdowns. Disable logging of DoS attacks and see if that reduces the problem. This does not prevent the router from protecting you from the outside world.

You have posted your message in the section of this community given over to Nighthawk WiFi Routers. (This is easily done, given Netgear's complicated community structure.)

Many questions apply to different types of device, so there may be useful responses here, but you might get more help, and find earlier questions and answers specific to your device, in the appropriate section for your hardware. That's probably here:

Nighthawk Mesh System - NETGEAR Communities

I will ask the Netgear moderator to move your message.