MR60 keeps going down

[dexie]

I keep having the internet connection going out and in the logs I see these messages

[DoS attack: RST Scan] from source 1.1.1.1,port 443 Thursday, Jul 27,2023 19:22:32 [DoS attack: RST Scan] from source 35.166.194.27,port 443 Thursday, Jul 27,2023 19:22:32

It's driving me nuts because I don't understand what's going on. I'm hoping it's an easy fix.

[michaelkenward]

---

@dexie wrote:

I keep having the internet connection going out and in the logs I see these messages

[DoS attack: RST Scan] from source 1.1.1.1,port 443 Thursday, Jul 27,2023 19:22:32 [DoS attack: RST Scan] from source 35.166.194.27,port 443 Thursday, Jul 27,2023 19:22:32

---

I doubt of those messages have anything to do eith the "connection going out". (What actually happens? Wifi? Ethernet?)

Netgear's firmware is great at creating false reports of DoS attacks. Many of them are no such thing.

Search - NETGEAR Communities – DoS attacks

Use Whois.net to see who is behind some of them and you may find that they are from places like Facebook, Google, even your ISP.

Here is a useful tool for that task:

IPNetInfo: Retrieve IP Address Information from WHOIS servers

If these events are slowing down your router, that may be because it is using up processor time as it writes the events to your logs. Anything that uses processor power – event logging, QoS management, traffic metering – may cause slowdowns. Disable logging of DoS attacks and see if that reduces the problem. This does not prevent the router from protecting you from the outside world.

As to your problem, what firmware version do you have on the device?

A number is more useful than "the latest". (It may not be by the time people read this.) There can also be newer versions, or "hot fixes", that do not show up if you check for new firmware in the browser interface.

It might also help if you told people what the modem is in front of this router, if there is one. The make and model number could be useful. Is it, by any chance, also a router, with a set of LAN ports on the back?

The reason for asking is that a lot of people turn up here trying to put a router behind a modem that is also a router. That can complicate troubleshooting.