Orbi WiFi 7 RBE973
Reply

DDOS Attacks

Sp4
Guide
Guide

DDOS Attacks

I have a NightHawk XR500 router and the logs report I am getting constant DOS attacks. Now I am interested in getting a hardware firewall. I see Netgear offers the Insight Managed Business Router (BR200), but was wondering if anyone have any sugestions for me to look at? I know they offer a PLUS and SMART line of switches but I'm am getting errors trying to get to those pages right now.

 

I'm also hoping to keep my Nighthawk as a wiress access point when the firewall is installed. Thank you

Message 1 of 5
schumaku
Guru

Re: DDOS Attacks

What does make you believe you are under -real- constant DoS attack?

 

Ignore all these false DoS entries caused by various operation conditions, eg. mobile clients roaming on/off from the home network to the moblie network, desktop computer with many open browser or whatever sessions which are going to sleep or shutdown/powered off.. These DoS log entries are more a Netgear consumer router features than a real problem. Seriously.

 

Keep having fun gaming with your XR500!

 

 

Message 2 of 5
Sp4
Guide
Guide

Re: DDOS Attacks

Thank you for your response. I powered off all my network devices and only left my router connected to the internet. These supposed Dos attacks were still getting reported by the router even when nothing else was connected. I also had my ISP change my IP address. The router is still reporting these attacks. I'm kinda at a loss right now with whats going on. I havent had a chance to spend too much time investigating all the IP addresses my router was reporting as a DoS attacks. The handfull I looked up all offered some kind of internet security. So at this moment I'm not sure if the reported IPs are just servers the attack is passing through or not. I would assume anyone doing any real DoS attacks would pass the network traffic through multiple VPNs and servers to mask their real identity. I know my NightHawk has good security I was just interesed in seeing if I could beef it up a bit. If I come across any new info I'll share it, but I know this isnt the proper forum to discuss how to deal with DoS attacks.

Message 3 of 5
schumaku
Guru

Re: DDOS Attacks

Would be interesting to see a representative selection of the reported DoS...

 

 

Message 4 of 5
Sp4
Guide
Guide

Re: DDOS Attacks

[DoS Attack: TCP/UDP Chargen] from source: 46.166.187.81, port 47946, Wednesday, February 24, 2021 17:18:54
[DoS Attack: SYN/ACK Scan] from source: 116.203.85.245, port 25565, Wednesday, February 24, 2021 17:19:55
[DoS Attack: TCP/UDP Chargen] from source: 37.49.230.190, port 60524, Wednesday, February 24, 2021 17:23:53
[DoS Attack: ACK Scan] from source: 184.84.244.17, port 443, Wednesday, February 24, 2021 23:19:27
[DoS Attack: ACK Scan] from source: 184.84.244.17, port 443, Wednesday, February 24, 2021 23:18:49
[DoS Attack: SYN/ACK Scan] from source: 50.3.111.104, port 22, Wednesday, February 24, 2021 23:05:56
[DoS Attack: ACK Scan] from source: 172.126.19.100, port 53, Wednesday, February 24, 2021 22:35:21
[DoS Attack: ACK Scan] from source: 110.138.84.58, port 50306, Wednesday, February 24, 2021 22:20:19
[DoS Attack: ACK Scan] from source: 110.138.84.58, port 50304, Wednesday, February 24, 2021 22:20:19
[DoS Attack: ACK Scan] from source: 184.84.244.59, port 443, Wednesday, February 24, 2021 21:19:26
[DoS Attack: ACK Scan] from source: 23.33.85.237, port 443, Thursday, February 25, 2021 03:48:00
[DoS Attack: ACK Scan] from source: 23.33.85.237, port 443, Thursday, February 25, 2021 03:47:16
[DoS Attack: ACK Scan] from source: 23.33.85.237, port 443, Thursday, February 25, 2021 03:46:54
[DoS Attack: SYN/ACK Scan] from source: 121.36.240.158, port 3389, Thursday, February 25, 2021 03:28:22
[DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 03:12:10
[DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 03:12:05
[DoS Attack: SYN/ACK Scan] from source: 51.89.176.230, port 22, Thursday, February 25, 2021 02:47:25
[DoS Attack: SYN/ACK Scan] from source: 45.43.15.238, port 25565, Thursday, February 25, 2021 02:47:07
[DoS Attack: SYN/ACK Scan] from source: 51.89.176.230, port 22, Thursday, February 25, 2021 02:45:40
[DoS Attack: SYN/ACK Scan] from source: 51.89.176.230, port 22, Thursday, February 25, 2021 02:43:30
[DoS Attack: TCP/UDP Chargen] from source: 184.105.139.89, port 38084, Thursday, February 25, 2021 01:49:36
[DoS Attack: TCP/UDP Chargen] from source: 162.220.165.204, port 48143, Thursday, February 25, 2021 01:13:01
[DoS Attack: SYN/ACK Scan] from source: 64.67.120.198, port 80, Thursday, February 25, 2021 01:06:33
[DoS Attack: SYN/ACK Scan] from source: 64.67.120.198, port 80, Thursday, February 25, 2021 01:06:23
[DoS Attack: SYN/ACK Scan] from source: 64.67.120.198, port 80, Thursday, February 25, 2021 01:06:22
[DoS Attack: SYN/ACK Scan] from source: 64.67.120.198, port 80, Thursday, February 25, 2021 01:06:17
[DoS Attack: SYN/ACK Scan] from source: 51.83.217.214, port 49230, Thursday, February 25, 2021 09:17:43
[DoS Attack: SYN/ACK Scan] from source: 216.56.63.130, port 10443, Thursday, February 25, 2021 09:04:17
[DoS Attack: SYN/ACK Scan] from source: 216.56.63.130, port 10443, Thursday, February 25, 2021 09:04:17
[DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 08:47:01
[DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 08:29:19
[DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 08:11:17
[DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 08:10:16
[DoS Attack: SYN/ACK Scan] from source: 51.255.4.74, port 6667, Thursday, February 25, 2021 07:59:21
[DoS Attack: SYN/ACK Scan] from source: 160.153.136.3, port 80, Thursday, February 25, 2021 07:53:15
[DoS Attack: ACK Scan] from source: 107.162.170.45, port 80, Thursday, February 25, 2021 07:49:20
[DoS Attack: ACK Scan] from source: 107.162.170.45, port 80, Thursday, February 25, 2021 07:46:06
[DoS Attack: ACK Scan] from source: 107.162.170.45, port 80, Thursday, February 25, 2021 07:43:03
[DoS Attack: ACK Scan] from source: 107.162.170.45, port 80, Thursday, February 25, 2021 07:42:22
[DoS Attack: ACK Scan] from source: 107.162.170.45, port 80, Thursday, February 25, 2021 07:39:34
[DoS Attack: ACK Scan] from source: 107.162.170.45, port 80, Thursday, February 25, 2021 07:39:10
[DoS Attack: ACK Scan] from source: 107.162.170.45, port 80, Thursday, February 25, 2021 07:37:36
[DoS Attack: ACK Scan] from source: 107.162.170.45, port 80, Thursday, February 25, 2021 07:35:34
[DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 07:32:04
[DoS Attack: ACK Scan] from source: 67.183.211.22, port 53, Thursday, February 25, 2021 07:26:18
[DoS Attack: ACK Scan] from source: 107.162.170.45, port 80, Thursday, February 25, 2021 07:19:17
[DoS Attack: ACK Scan] from source: 107.162.170.45, port 80, Thursday, February 25, 2021 07:16:18
[DoS Attack: ACK Scan] from source: 107.162.170.45, port 80, Thursday, February 25, 2021 07:02:35
[DoS Attack: SYN/ACK Scan] from source: 103.212.158.163, port 22, Thursday, February 25, 2021 06:56:53
[DoS Attack: ACK Scan] from source: 107.162.170.45, port 80, Thursday, February 25, 2021 06:20:19
[DoS Attack: ACK Scan] from source: 107.162.170.45, port 80, Thursday, February 25, 2021 06:18:09
[DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 06:09:54
[DoS Attack: SYN/ACK Scan] from source: 47.39.38.76, port 80, Thursday, February 25, 2021 06:08:57
[DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 05:33:10
[DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 05:24:58
[DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 05:24:24
[DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 05:12:26
[DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 05:10:20
[DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 05:03:41
[DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 05:03:17
[DoS Attack: SYN/ACK Scan] from source: 54.37.128.153, port 27015, Thursday, February 25, 2021 05:00:00
[DoS Attack: RST Scan] from source: 18.204.230.237, port 7070, Thursday, February 25, 2021 04:47:31
[DoS Attack: ACK Scan] from source: 69.140.244.127, port 80, Thursday, February 25, 2021 04:41:22
[DoS Attack: RST Scan] from source: 3.126.23.211, port 8801, Thursday, February 25, 2021 04:41:10
[DoS Attack: ACK Scan] from source: 69.140.244.127, port 80, Thursday, February 25, 2021 04:37:54
[DoS Attack: TCP/UDP Chargen] from source: 45.130.138.106, port 37961, Thursday, February 25, 2021 04:35:39
[DoS Attack: SYN/ACK Scan] from source: 104.198.14.52, port 80, Thursday, February 25, 2021 04:18:23
[DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 04:17:32
[DoS Attack: SYN/ACK Scan] from source: 178.238.47.107, port 80, Thursday, February 25, 2021 04:14:27
[DoS Attack: SYN/ACK Scan] from source: 54.37.129.99, port 34533, Thursday, February 25, 2021 04:12:41
[DoS Attack: SYN/ACK Scan] from source: 139.99.124.27, port 30140, Thursday, February 25, 2021 03:56:53
[DoS Attack: SYN/ACK Scan] from source: 51.83.217.214, port 49230, Thursday, February 25, 2021 19:36:58
[DoS Attack: SYN/ACK Scan] from source: 104.21.57.186, port 443, Thursday, February 25, 2021 19:33:04
[DoS Attack: SYN/ACK Scan] from source: 104.21.57.186, port 443, Thursday, February 25, 2021 19:33:03
[DoS Attack: TCP/UDP Chargen] from source: 146.88.240.4, port 49191, Thursday, February 25, 2021 19:32:01
[DoS Attack: SYN/ACK Scan] from source: 35.199.126.88, port 80, Thursday, February 25, 2021 19:30:55
[DoS Attack: TCP/UDP Echo] from source: 141.212.123.26, port 38202, Thursday, February 25, 2021 19:28:14
[DoS Attack: SYN/ACK Scan] from source: 104.18.101.40, port 443, Thursday, February 25, 2021 17:44:52
[DoS Attack: SYN/ACK Scan] from source: 104.18.101.40, port 443, Thursday, February 25, 2021 17:44:51
[DoS Attack: RST Scan] from source: 43.249.195.156, port 39003, Thursday, February 25, 2021 17:43:45
[DoS Attack: RST Scan] from source: 43.249.195.156, port 39003, Thursday, February 25, 2021 17:43:45
[DoS Attack: SYN/ACK Scan] from source: 103.95.221.0, port 80, Thursday, February 25, 2021 17:40:35
[DoS Attack: SYN/ACK Scan] from source: 54.38.192.109, port 13523, Thursday, February 25, 2021 17:24:16
[DoS Attack: SYN/ACK Scan] from source: 172.217.10.14, port 443, Thursday, February 25, 2021 17:08:25
[DoS Attack: SYN/ACK Scan] from source: 172.217.10.14, port 443, Thursday, February 25, 2021 17:07:02
[DoS Attack: SYN/ACK Scan] from source: 185.254.99.69, port 30130, Thursday, February 25, 2021 17:02:34
[DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:53:04
[DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:52:36
[DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:52:35
[DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:52:16
[DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:52:16
[DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:52:09
[DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:52:08
[DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:51:59
[DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:51:57
[DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:51:34
[DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:51:33
[DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:51:31
[DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:51:30
[DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:51:29
[DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:51:26
[DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:51:25
[DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:51:25
[DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:51:24
[DoS Attack: SYN/ACK Scan] from source: 147.135.105.61, port 30120, Thursday, February 25, 2021 16:51:17
[DoS Attack: SYN/ACK Scan] from source: 2.17.37.152, port 443, Thursday, February 25, 2021 16:43:24
[DoS Attack: SYN/ACK Scan] from source: 40.114.234.93, port 60, Thursday, February 25, 2021 16:26:08
[DoS Attack: SYN/ACK Scan] from source: 94.23.134.247, port 443, Thursday, February 25, 2021 16:17:45
[DoS Attack: SYN/ACK Scan] from source: 185.254.99.69, port 30130, Thursday, February 25, 2021 15:55:32
[DoS Attack: SYN/ACK Scan] from source: 185.254.99.69, port 30130, Thursday, February 25, 2021 15:54:52
[DoS Attack: SYN/ACK Scan] from source: 51.89.16.248, port 2100, Sunday, February 28, 2021 15:02:36
[DoS Attack: TCP/UDP Chargen] from source: 157.90.92.101, port 40887, Sunday, February 28, 2021 14:55:07
[DoS Attack: ACK Scan] from source: 86.3.28.89, port 80, Sunday, February 28, 2021 14:50:45
[DoS Attack: SYN/ACK Scan] from source: 172.67.222.17, port 80, Sunday, February 28, 2021 14:48:47
[DoS Attack: SYN/ACK Scan] from source: 172.67.222.17, port 80, Sunday, February 28, 2021 14:48:46
[DoS Attack: TCP/UDP Chargen] from source: 198.144.159.119, port 44037, Sunday, February 28, 2021 14:41:14
[DoS Attack: SYN/ACK Scan] from source: 51.79.162.110, port 27586, Sunday, February 28, 2021 14:19:28
[DoS Attack: SYN/ACK Scan] from source: 172.67.222.17, port 80, Sunday, February 28, 2021 14:12:39
[DoS Attack: SYN/ACK Scan] from source: 172.67.222.17, port 80, Sunday, February 28, 2021 14:12:38
[DoS Attack: SYN/ACK Scan] from source: 51.79.162.110, port 19314, Sunday, February 28, 2021 14:10:48
[DoS Attack: SYN/ACK Scan] from source: 54.36.178.5, port 25565, Sunday, February 28, 2021 14:09:17
[DoS Attack: SYN/ACK Scan] from source: 51.79.162.110, port 29783, Sunday, February 28, 2021 14:08:02
[DoS Attack: SYN/ACK Scan] from source: 51.79.162.110, port 55893, Sunday, February 28, 2021 14:06:46
[DoS Attack: SYN/ACK Scan] from source: 54.37.196.8, port 30120, Sunday, February 28, 2021 13:59:12
[DoS Attack: SYN/ACK Scan] from source: 54.36.178.5, port 25565, Sunday, February 28, 2021 13:59:01
[DoS Attack: SYN/ACK Scan] from source: 193.70.117.31, port 30120, Sunday, February 28, 2021 13:55:23

 

Message 5 of 5
Top Contributors
Discussion stats
  • 4 replies
  • 1402 views
  • 0 kudos
  • 2 in conversation
Announcements

Orbi WiFi 7