NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

IAAPG's avatar
IAAPG
Follower
Aug 08, 2021

Stopping DDOS attacks

,

Hi all,

 

I've noticed that every ten minutes I'm getting a DDOS attack from fe80:0000:0000:0000:3e41:0eff:fe1f:c819. I can't trace it and I'm unsure how to blacklist/block ip addresses. I do not have a hardware firewall currently but I plan to get one eventually. Is there a way to trace this IP to figure out where the attacks are coming from? Is there any way to stop this ip from flooding my network with garbage?

2 Replies

  • michaelkenward's avatar
    michaelkenward
    Guru - Experienced User
    Aug 20, 2021
    IAAPG wrote:

    ,

    Hi all,

     

    I've noticed that every ten minutes I'm getting a DDOS attack from fe80:0000:0000:0000:3e41:0eff:fe1f:c819.

    Netgear's firmware is great at creating false reports of DoS attacks. Many of them are no such thing.

     

    Search - NETGEAR Communities – DoS attacks

     

    If these events are slowing down your router, that may be because it is using up processor time as it writes the events to your logs. Anything that uses processor power – event logging, QoS management, traffic metering – may cause slowdowns. Disable logging of DoS attacks and see if that reduces the problem.

     

    This does not disable DOS protection, which is what DarrenM is talking about. But some users even suggest that you can survive without that.

     

    This is a bit odd though:

     

    IAAPG wrote:

    ,

    I can't trace it .....

     

    Most attacks I have seen reveal an IP address. But not knowing what the exact log entry is, who knows?