× NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
× Introducing the new Orbi 770 Series Mesh System. To learn more click here.
Orbi WiFi 7 RBE973
Reply

[DoS attack: ACK Scan] Help Please

Bean731
Follower

[DoS attack: ACK Scan] Help Please

Nighthawk XR1000 1.0.0.64_1.0.49

Windows 10

 

I am hoping that you could assist me with your vast knowledge in Networking. I do a little competitive gaming. Well shortly after a game noticed my latency in game was jumping up from around a 18 ping to 999. Reset my router and modem to see if I was having a Charter Spectrum issues. Well after the reset it didn’t fix it so I reached out to Spectrum and they told me there was no service issues in the area and everything looked good with my modem, speeds, ping etc.

 

So I logged into my Netgear XR1000 router just to see if anything was off and that’s when I came across logs and logs of what is attached. Not havening extensive knowledge in networking I started to google getting DDOS’d and what I could do for it. One thing I came across was changing the MAC address on the Networking tab of the router and forcing an IP Change so I did that. When I did that I ran a “whatsmyip” and it picked up a new address like I hoped it would but it wasn’t the normal 47 IP that I usually have from Spectrum. When I did that my internet was running around 10mb down less than 1 up from its normal 500/30. So I switched it back to the Use Default Address and it rebooted and picked up the same IP I had before and the logs started to fill up with the same errors.

 

DoS attack: ACK Scan] from source 107.23.225.40,port 443 Tuesday, Feb 21,2023 21:44:33
[DoS attack: ACK Scan] from source 44.241.36.116,port 443 Tuesday, Feb 21,2023 21:44:25
[DoS attack: ACK Scan] from source 107.23.225.40,port 443 Tuesday, Feb 21,2023 21:44:22
[DoS attack: ACK Scan] from source 99.181.106.4,port 443 Tuesday, Feb 21,2023 21:44:11
[DoS attack: ACK Scan] from source 3.230.28.201,port 443 Tuesday, Feb 21,2023 21:43:59
[DoS attack: ACK Scan] from source 44.193.185.61,port 443 Tuesday, Feb 21,2023 21:43:08
[DoS attack: ACK Scan] from source 44.241.36.116,port 443 Tuesday, Feb 21,2023 21:43:03
[DoS attack: ACK Scan] from source 44.238.40.237,port 443 Tuesday, Feb 21,2023 21:42:46
[DoS attack: ACK Scan] from source 99.181.106.4,port 443 Tuesday, Feb 21,2023 21:42:34
[DoS attack: ACK Scan] from source 35.188.42.15,port 443 Tuesday, Feb 21,2023 21:42:27
[DoS attack: ACK Scan] from source 35.83.110.201,port 443 Tuesday, Feb 21,2023 21:42:15
[DoS attack: Fraggle Attack] from source 97.87.160.1,port 67 Tuesday, Feb 21,2023 21:42:14
[DoS attack: ACK Scan] from source 35.83.110.201,port 443 Tuesday, Feb 21,2023 21:42:09
[DoS attack: Fraggle Attack] from source 97.87.160.1,port 67 Tuesday, Feb 21,2023 21:41:46
[DoS attack: Fraggle Attack] from source 30.11.120.1,port 67 Tuesday, Feb 21,2023 21:41:03
[DoS attack: ACK Scan] from source 184.25.173.208,port 443 Tuesday, Feb 21,2023 21:40:18
[DoS attack: Fraggle Attack] from source 30.11.120.1,port 67 Tuesday, Feb 21,2023 21:39:36
[DoS attack: ACK Scan] from source 146.75.82.167,port 443 Tuesday, Feb 21,2023 21:38:47

 

So im at a point now where I can not game at all. My normal connectivity is all over the place and Spectrum said it was my issue.

Message 1 of 3
FURRYe38
Guru

Re: [DoS attack: ACK Scan] Help Please

Most of those are just the router had logging reporting what the router is designed to do in this area. Block stuff. 

You'll need to so a whois lookup on those IP addresses you see there. 

Most of the entries are benine. 

 

What is the Mfr and model# of the Internet Service Providers modem/ONT the NG router is connected too?
Be sure your using a good quality LAN cable between the modem and router. CAT6 is recommended. 

 

Also recommend running www.pingplotter.com with a wired PC connected directly to your ISP modem or ONT. 

Message 2 of 3
Netduma-Liam
NetDuma Partner

Re: [DoS attack: ACK Scan] Help Please

If you notice this problem again, could you try connecting a device directly to the modem and run a speed test from there? Does that still report the same low results?

Message 3 of 3
Discussion stats
  • 2 replies
  • 1559 views
  • 0 kudos
  • 3 in conversation
Announcements

Orbi 770 Series