Orbi WiFi 7 RBE973
Reply

Re: DoS attack: ACK Scan

Mysun
Follower

DoS attack: ACK Scan

Firmware VersionV1.0.4.84_10.1.84

The internet connection has been lost and can only be restored by restarting the router. Kindly please suggest a Solution For the same.

 

[DoS attack: ACK Scan] attack packets in last 20 sec from ip [20.198.118.190], Saturday, Apr 13,2024 15:16:31
[DHCP IP: (192.168.1.5)] to MAC address A8:6B:AD:27:A5:0B, Saturday, Apr 13,2024 15:16:31
[DHCP IP: (192.168.1.66)] to MAC address 50:28:4A:E5:BB:5E, Saturday, Apr 13,2024 15:16:31
[DHCP IP: (192.168.1.10)] to MAC address 50:C2:E8:31:4B:91, Saturday, Apr 13,2024 15:16:25
[DoS attack: ACK Scan] attack packets in last 20 sec from ip [20.198.119.84], Saturday, Apr 13,2024 15:16:25
[DHCP IP: (192.168.1.12)] to MAC address 50:28:4A:ED:6A:98, Saturday, Apr 13,2024 15:16:22
[Time synchronized with NTP server] Saturday, Apr 13,2024 15:16:21

Message 1 of 2

Re: DoS attack: ACK Scan

Those IP addresses are from Microsoft.

 

Netgear's firmware is great at creating false reports of DoS attacks. Many of them are no such thing.

 

Search - NETGEAR Communities – DoS attacks

 

Use Whois.net to see who is behind some of them and you may find that they are from places like Facebook, Google, even your ISP.

 

Here is a useful tool for that task:

 

IPNetInfo: Retrieve IP Address Information from WHOIS servers

 

If these events are slowing down your router, that may be because it is using up processor time as it writes the events to your logs. Anything that uses processor power – event logging, QoS management, traffic metering – may cause slowdowns. Disable logging of DoS attacks and see if that reduces the problem. This does not prevent the router from protecting you from the outside world.

 

Then the usual boilerplate questions to eliminate some of the more common issues that crop up here.

What firmware version do you have on the device?

A number is more useful than "the latest". There may be newer versions, or "hot fixes", that do not show up if you check for new firmware with an app or in the browser interface.

If there is one it might also help if you told people the make and model number of the modem/gateway/ONT that connects this router to the Internet. Is it, by any chance, also a router, with a set of LAN ports on the back?

I ask because a lot of people turn up here trying to put a router behind a modem that is also a router. That can complicate troubleshooting.

Message 2 of 2
Top Contributors
Discussion stats
  • 1 reply
  • 451 views
  • 0 kudos
  • 2 in conversation
Announcements

Orbi 770 Series