- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
Dos Attacks on NightHawk AC3200 Model C7800
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Dos Attacks on NightHawk AC3200 Model C7800
We are having so many problems with our new router. Looking at the Log I see this DOS Attacks:
[DoS attack: Echo char gen] from source: 83.97.20.35, port 51723, Thu, May 07, 2020 21:17:03
[DoS attack: Sync flood] from source: 13.107.42.12, port 443, Thu, May 07, 2020 20:45:20
[DoS attack: Sync flood] from source: 170.149.103.23, port 443, Thu, May 07, 2020 20:29:49
[DoS attack: Sync flood] from source: 170.149.103.23, port 443, Thu, May 07, 2020 20:24:41
[DoS attack: Ascend Kill attack] from source: 89.248.168.217, port 55154, Thu, May 07, 2020 20:02:53
When this happens, I loose my wifi connection to the internet. What can we do to stop these. We are just regular people working from home trying to make a living and can't stay connected log enough. Cox is our internet provider.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Dos Attacks on NightHawk AC3200 Model C7800
So many questions.....
When you log into your router, 192.168.1.1. admin and password. Didyou change the password to something other than password?
Does Cox require login via the router?
Is your DNS auto?
Do you require Static IP?
Is your WiFi locked down and protected. Even the GUEST network?!
Gamer? (Xbox? PS3/4?.Etc)
Are you using port forwarding?
Do your PC's that use the internet have malware or virus on them?
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Dos Attacks on NightHawk AC3200
Thanks for offering to help. I'm answering your questions.
1. No we didn't change the password.
2. I don't know if Cox requires a login.
3. We are setup with DHCP
4. I don't know if I require a static IP
5. The Guest Network is not enabled. I'm not sure if Wifi is locked down.
How would I know?
6. We are not gamers.
7. Port forwarding is turned off
8. I just found out I had a virus but I've cleaned it up. The other 2 laptops doesnot have viruses. We use BitDefender and Malwarebytes on 2 laptops and work laptop has crowdstrike.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Dos Attacks on NightHawk AC3200
Ok. Here is some more
1. No we didn't change the password.
**Log into the router on PC with 192.168.1.1. admin/password. Click on the advance tab. Go to admin tab on the right. Click set password. Your old password will be password. Then make a new one that you can remember. This will be how you log into the router from 192.168.1.1. User name will still be admin and the passowrd will be your new on
2. I don't know if Cox requires a login.
**From what I can see online, they do not.
3. We are setup with DHCP
**Good
4. I don't know if I require a static IP
**On log in page, 192.168.1.1, under the internet tab there should be the option of Internet IP Address. Most ISP are Get Dynamically from ISP. If the other is checked, call Cox and see what they require.
5. The Guest Network is not enabled.
**On the log in page of you router, 192.168.1.1, there should be a tab called Guest Network. Make sure that it isn't broadcasting. But just in case, give it an SSID. I put one in with "=" and "*" and weird symbols. Then I gave it a security option. Last I have it a password miles long. (This isn't one you need to remember if you will never use Guest Network.
6. I'm not sure if Wifi is locked down. How would I know?
** One the log in page, 192.168.1.1, there should be a tab called Wireless. Here you will give your network a(n) SSID. Next pick your security level. (This is your preference). Then choose to broadcast or not. Some people do and some don't. Pick a passowrd that uses special symbols with numbers and letter and caps. Example: !PaSS!word?IsSAFE!05072020*!
7. We are not gamers.
** OK
8. Port forwarding is turned off
**OK
9. I just found out I had a virus but I've cleaned it up. The other 2 laptops doesnot have viruses. We use BitDefender and Malwarebytes on 2 laptops and work laptop has crowdstrike.
**Use malware to do a DEEP scan on your machines to make sure there are no lingering malware. Also, if you havent already, do a right click update on Malware. All my machines had an update today.
Do you rent a modem from Cox? Is your modem from Cox a 2 in 1? Example, it is a modem and router in one unit. If that is the case, then you just need Cox to go into their setting and turn off the WiFi and allow your router to be primary.
I know this seems like a lot but this should take 10-15 minutes to do. Last, when your router is updated and everything is complete. Reboot the modem and router.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Dos Attacks on NightHawk AC3200 Model C7800
@anointedrj wrote:
We are having so many problems with our new router. Looking at the Log I see this DOS Attacks:
Netgear's firmware is great at creating false reports of DoS attacks. Many of them are no such thing.
Search - NETGEAR Communities – DoS attacks
Use Whois.net to see who is behind some of them and you may find that they are from places like Facebook, Google, even your ISP.
Here is a useful tool for that task:
IPNetInfo: Retrieve IP Address Information from WHOIS servers
If these events are slowing down your router, that may be because it is using up processor time as it writes the events to your logs. Anything that uses processor power – event logging, QoS management, traffic metering – may cause slowdowns. Disable logging of DoS attacks and see if that reduces the problem. This does not prevent the router from protecting you from the outside world.
The IP addresses that are "attacking" you, include The New York Times Company and Microsoft Corporation, neither of them is especially evil.
By the way, it may not matter, but you have posted your message in the section of this community given over to Nighthawk WiFi Routers. (This is easily done, given Netgear's impenetrable community structure.)
If you need more help, you might get better and quicker replies, and find other answers, over in the appropriate section for your device. That's probably here:
Cable Modems & Routers
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Dos Attacks on NightHawk AC3200 Model C7800
I've also had bouts of DoS attacks. I'm making the recommended changes in this thread, but we do have a gaming system. What should I do in addition to the other suggestions?
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Dos Attacks on NightHawk AC3200 Model C7800
Just FYI, I was told by a network engineer that DoS attacks are successful blocks by the router. So they don't mean someone got it, it means your router did its job and blocked the attempt.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Dos Attacks on NightHawk AC3200 Model C7800
However, it does overwhelm my bandwidth at times and I lose my Internet connection.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Dos Attacks on NightHawk AC3200 Model C7800
@indiragrimes wrote:
However, it does overwhelm my bandwidth at times and I lose my Internet connection.
That may be the processor in the router flogging itself to death as it writes the events to logs.
Disabling that logging does not lower your defences. It does take the strain off the processor.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Dos Attacks on NightHawk AC3200 Model C7800
Oh, ok. So I can uncheck the log to write "Known DoS attacks and Port Scans" and it should help with the overload?
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Dos Attacks on NightHawk AC3200 Model C7800
@indiragrimes wrote:
Oh, ok. So I can uncheck the log to write "Known DoS attacks and Port Scans" and it should help with the overload?
People have reported improvements by doing that. You lose nothing by trying.
It is the same as disabling QoS and traffic metering, where the benefits don't make up for the loss in performance.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Dos Attacks on NightHawk AC3200 Model C7800
I only check items like system operation, admin log in and wifi connections. Uncheck all others.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
• Introducing NETGEAR WiFi 7 Orbi 770 Series and Nighthawk RS300
• What is the difference between WiFi 6 and WiFi 7?
• Yes! WiFi 7 is backwards compatible with other Wifi devices? Learn more