× Introducing the Orbi 970 Series Mesh System with WiFi 7 technology. For more information visit the NETGEAR Press Room.
Orbi WiFi 7 RBE973
Reply

NightHawk

OmgItsPaco
Tutor

NightHawk

Need help fast so I'm a streamer I constantly get dos a lot but sometimes when I look at the logs it does not show that I got dos so what is kicking me off I keep getting kicked off randomly thorugh out the day at least 4 to 5 times sometimes less sometimes more idk whats going on tbh. Ik dos attacks will kick me off but is there any advice on dos attacks and half of the time I get kicked off I go to check logs and there is not log of me getting dos then what can it be I really really need help I even change a number of my mac adress to get a new ip so I don't get booted from same people here is my log for today only. My stream dropped a lot of frames druing this about 3 to 4 times in a matter of 6 hours. 

 

[DoS attack: Smurf] attack packets in last 20 sec from ip [73.218.73.218], Thursday, Apr 19,2018 22:50:13
[DoS attack: STORM] attack packets in last 20 sec from ip [161.0.249.231], Thursday, Apr 19,2018 15:56:03
[DoS attack: STORM] attack packets in last 20 sec from ip [96.59.171.117], Thursday, Apr 19,2018 15:45:32

 What does smurf mean this dos attack just happen as I was writting this out!! Please help my full log does not tell me much more tbh 

 

Model: R7000|AC1900 Smart WIFI Router
Message 1 of 14
OmgItsPaco
Tutor

Re: NightHawk

[LAN access from remote] from 94.177.186.117:54940 to 192.168.1.128:1224, Thursday, Apr 19,2018 23:00:32
[LAN access from remote] from 107.170.239.243:35923 to 192.168.1.128:2362, Thursday, Apr 19,2018 23:00:26
[LAN access from remote] from 104.236.159.225:39076 to 192.168.1.128:143, Thursday, Apr 19,2018 23:00:05
[LAN access from remote] from 192.251.231.111:65534 to 192.168.1.128:8545, Thursday, Apr 19,2018 23:00:01
[LAN access from remote] from 5.188.11.93:53066 to 192.168.1.128:50032, Thursday, Apr 19,2018 22:59:15
[LAN access from remote] from 5.188.11.93:53066 to 192.168.1.128:50031, Thursday, Apr 19,2018 22:58:48
[email failed] fail to connect to outgoing mail server, Thursday, Apr 19,2018 22:58:15
[LAN access from remote] from 71.6.146.185:29011 to 192.168.1.128:5985, Thursday, Apr 19,2018 22:58:11
[LAN access from remote] from 184.162.202.7:49147 to 192.168.1.128:2222, Thursday, Apr 19,2018 22:57:50
[LAN access from remote] from 5.188.11.63:49525 to 192.168.1.128:34192, Thursday, Apr 19,2018 22:56:49
[LAN access from remote] from 220.152.76.103:36270 to 192.168.1.128:23, Thursday, Apr 19,2018 22:55:54
[LAN access from remote] from 120.194.42.194:51307 to 192.168.1.128:1433, Thursday, Apr 19,2018 22:54:26
[LAN access from remote] from 109.225.158.69:44489 to 192.168.1.128:23, Thursday, Apr 19,2018 22:54:15
[LAN access from remote] from 5.188.11.25:42373 to 192.168.1.128:31014, Thursday, Apr 19,2018 22:54:15
[LAN access from remote] from 184.105.247.210:21768 to 192.168.1.128:623, Thursday, Apr 19,2018 22:52:45
[DHCP IP: (192.168.1.6)] to MAC address E4:2B:34:6C:D5:FC, Thursday, Apr 19,2018 22:51:34
[LAN access from remote] from 79.20.99.197:36555 to 192.168.1.128:23, Thursday, Apr 19,2018 22:51:26
[LAN access from remote] from 5.188.11.89:50580 to 192.168.1.128:28104, Thursday, Apr 19,2018 22:50:15
[DoS attack: Smurf] attack packets in last 20 sec from ip [73.218.73.218], Thursday, Apr 19,2018 22:50:13
[LAN access from remote] from 201.13.178.228:39837 to 192.168.1.128:23, Thursday, Apr 19,2018 22:48:41
[LAN access from remote] from 119.82.251.149:49601 to 192.168.1.128:23, Thursday, Apr 19,2018 22:47:47
[LAN access from remote] from 185.143.223.201:51484 to 192.168.1.128:13749, Thursday, Apr 19,2018 22:46:10
[LAN access from remote] from 5.101.40.48:40174 to 192.168.1.128:13825, Thursday, Apr 19,2018 22:45:12
[LAN access from remote] from 77.236.85.195:47323 to 192.168.1.128:23, Thursday, Apr 19,2018 22:43:56
[LAN access from remote] from 185.143.223.125:49357 to 192.168.1.128:3396, Thursday, Apr 19,2018 22:43:28
[LAN access from remote] from 73.218.110.233:47798 to 192.168.1.128:23, Thursday, Apr 19,2018 22:41:46
[LAN access from remote] from 46.99.176.86:59944 to 192.168.1.128:2000, Thursday, Apr 19,2018 22:41:17
[LAN access from remote] from 177.197.80.157:29323 to 192.168.1.128:23, Thursday, Apr 19,2018 22:40:37
[LAN access from remote] from 185.222.211.36:50938 to 192.168.1.128:10226, Thursday, Apr 19,2018 22:40:30
[DHCP IP: (192.168.1.6)] to MAC address E4:2B:34:6C:D5:FC, Thursday, Apr 19,2018 22:39:30
[LAN access from remote] from 177.198.90.12:17898 to 192.168.1.128:2000, Thursday, Apr 19,2018 22:37:25
[LAN access from remote] from 46.166.168.36:28097 to 192.168.1.128:8000, Thursday, Apr 19,2018 22:37:19
[LAN access from remote] from 5.188.11.63:49382 to 192.168.1.128:36049, Thursday, Apr 19,2018 22:37:11
[LAN access from remote] from 151.106.13.158:5385 to 192.168.1.128:5060, Thursday, Apr 19,2018 22:36:21
[LAN access from remote] from 5.188.11.93:53066 to 192.168.1.128:50034, Thursday, Apr 19,2018 22:34:21
[LAN access from remote] from 49.79.97.235:37891 to 192.168.1.128:23, Thursday, Apr 19,2018 22:34:02
[LAN access from remote] from 5.188.9.135:47805 to 192.168.1.128:33891, Thursday, Apr 19,2018 22:33:46
[DHCP IP: (192.168.1.128)] to MAC address 70:9E:29:54:EA:63, Thursday, Apr 19,2018 22:33:44
[DHCP IP: (192.168.1.128)] to MAC address 70:9E:29:54:EA:63, Thursday, Apr 19,2018 22:32:49
[DHCP IP: (192.168.1.128)] to MAC address 70:9E:29:54:EA:63, Thursday, Apr 19,2018 22:32:11
[DHCP IP: (192.168.1.128)] to MAC address 70:9E:29:54:EA:63, Thursday, Apr 19,2018 22:31:37
[LAN access from remote] from 89.205.68.61:38431 to 192.168.1.128:23, Thursday, Apr 19,2018 22:31:32
[LAN access from remote] from 103.53.110.97:45906 to 192.168.1.128:2000, Thursday, Apr 19,2018 22:31:31
[LAN access from remote] from 185.10.68.228:45946 to 192.168.1.128:5601, Thursday, Apr 19,2018 22:31:23
[LAN access from remote] from 118.109.78.221:60316 to 192.168.1.128:23, Thursday, Apr 19,2018 22:31:21
[LAN access from remote] from 62.4.15.172:5086 to 192.168.1.128:5060, Thursday, Apr 19,2018 22:31:03
[LAN access from remote] from 5.188.11.63:49382 to 192.168.1.128:36045, Thursday, Apr 19,2018 22:30:51
[LAN access from remote] from 112.87.215.20:15103 to 192.168.1.128:5555, Thursday, Apr 19,2018 22:30:26
[DHCP IP: (192.168.1.128)] to MAC address 70:9E:29:54:EA:63, Thursday, Apr 19,2018 22:30:05
[LAN access from remote] from 5.188.10.108:45848 to 192.168.1.128:23390, Thursday, Apr 19,2018 22:29:28
[LAN access from remote] from 113.114.31.10:41816 to 192.168.1.128:23, Thursday, Apr 19,2018 22:29:24
[DHCP IP: (192.168.1.128)] to MAC address 70:9E:29:54:EA:63, Thursday, Apr 19,2018 22:29:05
[LAN access from remote] from 5.188.11.24:42383 to 192.168.1.128:9048, Thursday, Apr 19,2018 22:27:00
[LAN access from remote] from 185.143.223.90:57612 to 192.168.1.128:3597, Thursday, Apr 19,2018 22:25:39
[LAN access from remote] from 185.143.223.90:57612 to 192.168.1.128:4019, Thursday, Apr 19,2018 22:24:15
[LAN access from remote] from 185.244.25.186:34378 to 192.168.1.128:81, Thursday, Apr 19,2018 22:23:29
[LAN access from remote] from 191.101.167.86:53633 to 192.168.1.128:8545, Thursday, Apr 19,2018 22:23:24
[LAN access from remote] from 196.52.43.118:6666 to 192.168.1.128:2160, Thursday, Apr 19,2018 22:23:20
[LAN access from remote] from 107.170.193.11:37343 to 192.168.1.128:2323, Thursday, Apr 19,2018 22:22:24
[LAN access from remote] from 210.220.20.141:41815 to 192.168.1.128:1433, Thursday, Apr 19,2018 22:22:00
[LAN access from remote] from 80.82.77.139:23183 to 192.168.1.128:37777, Thursday, Apr 19,2018 22:21:58
[LAN access from remote] from 191.101.167.86:40832 to 192.168.1.128:8545, Thursday, Apr 19,2018 22:21:00
[LAN access from remote] from 5.188.11.24:42383 to 192.168.1.128:9092, Thursday, Apr 19,2018 22:20:15
[DHCP IP: (192.168.1.6)] to MAC address E4:2B:34:6C:D5:FC, Thursday, Apr 19,2018 22:20:11
[LAN access from remote] from 177.9.140.30:28986 to 192.168.1.128:2000, Thursday, Apr 19,2018 22:19:25
[LAN access from remote] from 119.204.60.61:39764 to 192.168.1.128:23, Thursday, Apr 19,2018 22:17:07
[LAN access from remote] from 181.214.87.14:54063 to 192.168.1.128:60060, Thursday, Apr 19,2018 22:16:02
[DHCP IP: (192.168.1.8)] to MAC address B8:44:D9:AB:5A:0D, Thursday, Apr 19,2018 22:15:02
[LAN access from remote] from 103.53.110.200:55922 to 192.168.1.128:2000, Thursday, Apr 19,2018 22:14:36
[LAN access from remote] from 192.241.189.130:57837 to 192.168.1.128:515, Thursday, Apr 19,2018 22:14:35
[LAN access from remote] from 196.52.43.119:6666 to 192.168.1.128:3493, Thursday, Apr 19,2018 22:10:54
[LAN access from remote] from 191.101.167.183:53882 to 192.168.1.128:3395, Thursday, Apr 19,2018 22:09:37
[LAN access from remote] from 211.206.94.2:20960 to 192.168.1.128:22, Thursday, Apr 19,2018 22:08:25
[DHCP IP: (192.168.1.5)] to MAC address 00:DB:70:C5:9A:8A, Thursday, Apr 19,2018 22:08:00
[LAN access from remote] from 201.194.107.2:19483 to 192.168.1.128:23, Thursday, Apr 19,2018 22:07:39
[LAN access from remote] from 180.97.200.224:3307 to 192.168.1.128:23, Thursday, Apr 19,2018 22:05:59
[DHCP IP: (192.168.1.6)] to MAC address E4:2B:34:6C:D5:FC, Thursday, Apr 19,2018 22:05:49
[LAN access from remote] from 5.101.40.48:40174 to 192.168.1.128:13168, Thursday, Apr 19,2018 22:05:14
[LAN access from remote] from 187.115.165.204:44777 to 192.168.1.128:22, Thursday, Apr 19,2018 22:04:20
[LAN access from remote] from 181.214.87.14:54063 to 192.168.1.128:40808, Thursday, Apr 19,2018 22:03:04
[DHCP IP: (192.168.1.5)] to MAC address 00:DB:70:C5:9A:8A, Thursday, Apr 19,2018 22:02:41
[DHCP IP: (192.168.1.128)] to MAC address 70:9E:29:54:EA:63, Thursday, Apr 19,2018 22:00:29
[DHCP IP: (192.168.1.128)] to MAC address 70:9E:29:54:EA:63, Thursday, Apr 19,2018 21:59:45
[DHCP IP: (192.168.1.128)] to MAC address 70:9E:29:54:EA:63, Thursday, Apr 19,2018 21:59:38
[LAN access from remote] from 200.93.248.248:64093 to 192.168.1.128:23, Thursday, Apr 19,2018 21:59:37
[LAN access from remote] from 181.214.87.247:46413 to 192.168.1.128:3356, Thursday, Apr 19,2018 21:59:23
[LAN access from remote] from 189.78.242.216:9961 to 192.168.1.128:23, Thursday, Apr 19,2018 21:59:18
[DHCP IP: (192.168.1.128)] to MAC address 70:9E:29:54:EA:63, Thursday, Apr 19,2018 21:59:00
[DHCP IP: (192.168.1.128)] to MAC address 70:9E:29:54:EA:63, Thursday, Apr 19,2018 21:58:26
[DHCP IP: (192.168.1.128)] to MAC address 70:9E:29:54:EA:63, Thursday, Apr 19,2018 21:58:09
[DHCP IP: (192.168.1.128)] to MAC address 70:9E:29:54:EA:63, Thursday, Apr 19,2018 21:57:42
[DHCP IP: (192.168.1.128)] to MAC address 70:9E:29:54:EA:63, Thursday, Apr 19,2018 21:56:31
[DHCP IP: (192.168.1.128)] to MAC address 70:9E:29:54:EA:63, Thursday, Apr 19,2018 21:56:02
[DHCP IP: (192.168.1.128)] to MAC address 70:9E:29:54:EA:63, Thursday, Apr 19,2018 21:55:57
[DHCP IP: (192.168.1.128)] to MAC address 70:9E:29:54:EA:63, Thursday, Apr 19,2018 21:54:58
[DHCP IP: (192.168.1.8)] to MAC address B8:44:D9:AB:5A:0D, Thursday, Apr 19,2018 21:54:54
[LAN access from remote] from 146.0.77.142:55282 to 192.168.1.128:9900, Thursday, Apr 19,2018 21:54:50
[DHCP IP: (192.168.1.128)] to MAC address 70:9E:29:54:EA:63, Thursday, Apr 19,2018 21:54:37
[LAN access from remote] from 94.177.177.213:54547 to 192.168.1.128:20220, Thursday, Apr 19,2018 21:53:40
[LAN access from remote] from 5.101.40.48:40174 to 192.168.1.128:15359, Thursday, Apr 19,2018 21:53:38
[DHCP IP: (192.168.1.128)] to MAC address 70:9E:29:54:EA:63, Thursday, Apr 19,2018 21:53:36
[LAN access from remote] from 192.251.231.111:65535 to 192.168.1.128:26969, Thursday, Apr 19,2018 21:53:30
[LAN access from remote] from 5.188.11.25:42373 to 192.168.1.128:31074, Thursday, Apr 19,2018 21:52:58
[LAN access from remote] from 114.67.229.240:47658 to 192.168.1.128:6379, Thursday, Apr 19,2018 21:52:54
[DHCP IP: (192.168.1.3)] to MAC address E0:CB:4E:9C:BD:04, Thursday, Apr 19,2018 21:52:08
[LAN access from remote] from 73.218.110.233:64818 to 192.168.1.128:23, Thursday, Apr 19,2018 21:51:25
[LAN access from remote] from 85.93.20.34:56791 to 192.168.1.128:20012, Thursday, Apr 19,2018 21:51:23
[LAN access from remote] from 180.94.210.233:35980 to 192.168.1.128:23, Thursday, Apr 19,2018 21:50:50
[LAN access from remote] from 216.98.153.248:8080 to 192.168.1.128:8080, Thursday, Apr 19,2018 21:50:07
[LAN access from remote] from 191.101.167.26:42429 to 192.168.1.128:12831, Thursday, Apr 19,2018 21:49:48
[LAN access from remote] from 5.188.11.35:42290 to 192.168.1.128:22337, Thursday, Apr 19,2018 21:48:56
[LAN access from remote] from 191.101.167.183:53882 to 192.168.1.128:3388, Thursday, Apr 19,2018 21:47:24
[LAN access from remote] from 138.36.192.139:49885 to 192.168.1.128:23, Thursday, Apr 19,2018 21:46:35
[LAN access from remote] from 5.188.11.93:53066 to 192.168.1.128:50039, Thursday, Apr 19,2018 21:46:25
[LAN access from remote] from 5.188.11.89:50521 to 192.168.1.128:26092, Thursday, Apr 19,2018 21:46:03
[LAN access from remote] from 177.82.132.33:64367 to 192.168.1.128:23, Thursday, Apr 19,2018 21:45:59
[LAN access from remote] from 124.112.187.191:21965 to 192.168.1.128:23, Thursday, Apr 19,2018 21:45:48
[LAN access from remote] from 107.170.227.141:50636 to 192.168.1.128:2222, Thursday, Apr 19,2018 21:45:38
[LAN access from remote] from 60.248.237.134:60794 to 192.168.1.128:23, Thursday, Apr 19,2018 21:44:51
[LAN access from remote] from 5.188.11.63:49382 to 192.168.1.128:35055, Thursday, Apr 19,2018 21:43:24
[LAN access from remote] from 184.105.247.238:60908 to 192.168.1.128:30005, Thursday, Apr 19,2018 21:42:52
[DHCP IP: (192.168.1.4)] to MAC address CC:29:F5:40:B3:F0, Thursday, Apr 19,2018 21:42:10
[LAN access from remote] from 5.188.11.35:42290 to 192.168.1.128:22389, Thursday, Apr 19,2018 21:41:56

Model: XR500| Nighthawk Pro Gaming Router
Message 2 of 14
OmgItsPaco
Tutor

Re: NightHawk

That is not full log but the rest is pretty much the same I cant put full log in becasue of to many words or something 

Message 3 of 14
Netduma-Fraser
NetDuma Partner

Re: NightHawk

If you think you're actually being DDoSed are you using a VPN to protect yourself?

Are you putting your stream into Traffic Prioritization? If so remove it as that may be the cause - only meant for low bandwidth applications like gaming.

Are you losing internet fully when this happens?
Message 4 of 14
OmgItsPaco
Tutor

Re: NightHawk

Thats my PS4 I made it as that IP for things like DMZ 

Model: XR500| Nighthawk Pro Gaming Router
Message 5 of 14
OmgItsPaco
Tutor

Re: NightHawk

I do not have a vpn most good vpns cost money and VPNs i used in the pass lowered my speeds by a lot 

Model: XR500| Nighthawk Pro Gaming Router
Message 6 of 14
Netduma-Fraser
NetDuma Partner

Re: NightHawk

Are you streaming directly from the PS4 to Twitch for example with Traffic Prioritization enabled? If so disable and try again.

Does the whole internet go down when this happens?
Message 7 of 14
OmgItsPaco
Tutor

Re: NightHawk

I am not using PS4 stream I do stream on PS4 but with obs where would I disable this thing 

Model: XR500| Nighthawk Pro Gaming Router
Message 8 of 14
Netduma-Fraser
NetDuma Partner

Re: NightHawk

It's at the bottom of the QoS page
Message 9 of 14
OmgItsPaco
Tutor

Re: NightHawk

Keep getting this and everytime I get it I end up getting disconnected from internet for a minute [Self2WAN ICMP type b Detected!] To prevent from revealing router's activity, this packet is droppe Friday, Apr 20,2018 20:25:04 What exactly is this how do I fix it need help 

Model: XR500| Nighthawk Pro Gaming Router
Message 10 of 14
Netduma_Jack
NetDuma Partner

Re: NightHawk

What Nighthawk model do you have? This forum is for the new Nighthawk XR500 Pro Gaming Router. I don't recognise the text you posted above so want to make sure we're talking about the same router.

Message 11 of 14
OmgItsPaco
Tutor

Re: NightHawk

Its model # is R7000 but it does not pop up on webiste when I go to model recommended 

Message 12 of 14
OmgItsPaco
Tutor

Re: NightHawk

this is the full info AC 1900 smart wifi router model #R7000  so sorry I've been a mess really trying to figure this out sorry for the miss leading info 

Message 13 of 14
OmgItsPaco
Tutor

Re: NightHawk

The UDP port one kicked me offline this happen when I had my nat at open now I changed it to secured and I get these 

[DoS attack: FIN Scan] attack packets in last 20 sec from ip [151.101.118.2], Sunday, Apr 22,2018 02:06:21
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [151.101.116.175], Sunday, Apr 22,2018 02:06:20
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [151.101.118.2], Sunday, Apr 22,2018 02:06:20
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [23.207.173.33], Sunday, Apr 22,2018 02:04:39
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [52.85.138.22], Sunday, Apr 22,2018 01:58:30
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [52.85.138.23], Sunday, Apr 22,2018 01:58:20
[DoS attack: UDP Port Scan] attack packets in last 20 sec from ip [185.130.212.69], Sunday, Apr 22,2018 00:51:05

 I can't tell if I'm being affected tbh this might be the fix but since I'm a gamer and streamer will this make my nat in game closed? and will this affect my stream in any way 

Model: XR500| Nighthawk Pro Gaming Router
Message 14 of 14
Discussion stats
  • 13 replies
  • 5951 views
  • 0 kudos
  • 3 in conversation
Announcements

Orbi WiFi 7