× Introducing the Orbi 970 Series Mesh System with WiFi 7 technology. For more information visit the NETGEAR Press Room.
Orbi WiFi 7 RBE973
Reply

Netgear XR500 Dos Attack

Twintz5
Follower

Netgear XR500 Dos Attack

Good Day Everyone, 

 

I recently got a new gateway from my isp. Plugged everything in and set it up in bridge mode. Noticed slow speeds so I opend up the router ui and checked logs page. All I am seeing inside the logs page is dos attack. I never had this issue before and have tried everything. Factory reset, software downgrade, a different gateway, static and dynamic ip. Still doing all that did not change a thing. When I plug my computer directly into the gateway everything works fine.

 

 

 

[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:07:38
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:05:38
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:03:38
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:02:24
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:02:19
[DoS Attack: ACK Scan] from source: 131.188.12.211, port 80, Thursday, December 23, 2021 12:01:44
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:01:40
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:01:20
[DoS Attack: ACK Scan] from source: 131.188.12.211, port 80, Thursday, December 23, 2021 12:01:20
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:01:10
[DoS Attack: ACK Scan] from source: 131.188.12.211, port 80, Thursday, December 23, 2021 12:01:07
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:01:01
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:01:01
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:01:01
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:01:01
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:01:01
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:01:01
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:01:01
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:01:01
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:01:01
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 12:00:24
[DoS Attack: ACK Scan] from source: 131.188.12.211, port 80, Thursday, December 23, 2021 11:59:45
[DoS Attack: ACK Scan] from source: 198.166.40.25, port 8080, Thursday, December 23, 2021 11:59:45
[DoS Attack: ACK Scan] from source: 131.188.12.211, port 80, Thursday, December 23, 2021 11:59:33
[DoS Attack: ACK Scan] from source: 79.124.67.90, port 80, Thursday, December 23, 2021 11:59:27
[DoS Attack: ACK Scan] from source: 79.124.67.90, port 80, Thursday, December 23, 2021 11:59:27
[DoS Attack: ACK Scan] from source: 149.201.240.100, port 80, Thursday, December 23, 2021 11:59:27
[DoS Attack: ACK Scan] from source: 131.188.12.211, port 80, Thursday, December 23, 2021 11:59:27
[DoS Attack: ACK Scan] from source: 91.210.88.42, port 80, Thursday, December 23, 2021 11:59:27
[DoS Attack: ACK Scan] from source: 131.188.12.211, port 80, Thursday, December 23, 2021 11:59:25
[DoS Attack: ACK Scan] from source: 131.188.12.211, port 80, Thursday, December 23, 2021 11:59:25
[DoS Attack: ACK Scan] from source: 192.38.78.162, port 80, Thursday, December 23, 2021 11:59:23
[DoS Attack: ACK Scan] from source: 193.50.6.155, port 80, Thursday, December 23, 2021 11:59:23
[DoS Attack: ACK Scan] from source: 157.131.224.201, port 80, Thursday, December 23, 2021 11:59:17
[DoS Attack: ACK Scan] from source: 89.102.0.150, port 80, Thursday, December 23, 2021 11:59:17
[DoS Attack: ACK Scan] from source: 128.153.145.19, port 80, Thursday, December 23, 2021 11:59:11
[DoS Attack: ACK Scan] from source: 198.60.22.13, port 80, Thursday, December 23, 2021 11:59:11
[DoS Attack: ACK Scan] from source: 198.60.22.13, port 80, Thursday, December 23, 2021 11:59:11
[DoS Attack: ACK Scan] from source: 140.247.173.13, port 80, Thursday, December 23, 2021 11:59:10
[DoS Attack: ACK Scan] from source: 157.131.224.201, port 80, Thursday, December 23, 2021 11:59:09
[DoS Attack: ACK Scan] from source: 213.174.147.249, port 80, Thursday, December 23, 2021 11:59:09
[DoS Attack: ACK Scan] from source: 213.174.147.249, port 80, Thursday, December 23, 2021 11:59:09
[DoS Attack: ACK Scan] from source: 208.81.1.244, port 80, Thursday, December 23, 2021 11:59:06
[DoS Attack: ACK Scan] from source: 65.175.128.102, port 80, Thursday, December 23, 2021 11:59:04
[DoS Attack: ACK Scan] from source: 140.247.173.13, port 80, Thursday, December 23, 2021 11:59:04
[DoS Attack: ACK Scan] from source: 208.81.1.244, port 80, Thursday, December 23, 2021 11:59:04
[DoS Attack: ACK Scan] from source: 208.81.1.244, port 80, Thursday, December 23, 2021 11:59:02
[DoS Attack: ACK Scan] from source: 157.131.224.201, port 80, Thursday, December 23, 2021 11:59:01
[DoS Attack: ACK Scan] from source: 147.75.69.165, port 80, Thursday, December 23, 2021 11:59:01
[DoS Attack: ACK Scan] from source: 157.131.224.201, port 80, Thursday, December 23, 2021 11:59:01
[DoS Attack: ACK Scan] from source: 204.16.246.250, port 80, Thursday, December 23, 2021 11:59:00
[DoS Attack: ACK Scan] from source: 157.131.224.201, port 80, Thursday, December 23, 2021 11:59:00
[DoS Attack: ACK Scan] from source: 198.166.40.25, port 8080, Thursday, December 23, 2021 11:59:00
[DoS Attack: ACK Scan] from source: 208.81.1.244, port 80, Thursday, December 23, 2021 11:59:00
[DoS Attack: ACK Scan] from source: 198.60.22.13, port 80, Thursday, December 23, 2021 11:58:58
[DoS Attack: ACK Scan] from source: 128.211.151.252, port 80, Thursday, December 23, 2021 11:58:56
[DoS Attack: ACK Scan] from source: 216.17.3.16, port 80, Thursday, December 23, 2021 11:58:52
[DoS Attack: ACK Scan] from source: 216.17.3.16, port 80, Thursday, December 23, 2021 11:58:52
[DoS Attack: ACK Scan] from source: 38.229.66.100, port 80, Thursday, December 23, 2021 11:58:51
[DoS Attack: ACK Scan] from source: 38.229.66.100, port 80, Thursday, December 23, 2021 11:58:51
[DoS Attack: ACK Scan] from source: 69.65.16.171, port 80, Thursday, December 23, 2021 11:58:50
[DoS Attack: ACK Scan] from source: 69.65.16.171, port 80, Thursday, December 23, 2021 11:58:50

Model: XR500|Nighthawk Pro Gaming Router
Message 1 of 2
Netduma-Fraser
NetDuma Partner

Re: Netgear XR500 Dos Attack

It's a known experience where the XR reports connections you make as DoS attacks but please be reassured you're not being attacked, they're false flags.

The speed issue will likely be because you haven't yet set your expected speeds in bandwidth settings or you've lowered Congestion Control on the QoS page
Message 2 of 2
Top Contributors
Discussion stats
  • 1 reply
  • 878 views
  • 0 kudos
  • 2 in conversation
Announcements

Orbi WiFi 7