Reply

Re: Getting DOS attack in logs, my internet disconnects everything in house including pc thats conne

ArmouredCat23
Follower

Getting DOS attack in logs, my internet disconnects everything in house including pc thats connected

I've read of dos attacks not being a problem and theyre normal, but maybe mine are contributing to something? I'm not sure because they come from amazon.com all in virgina. All internet drops on every device for about 1 minute or so. I've called isp and they gave the usual "its all good on our end", but they told me the internet was maxing out? I don't know how it was maxing out since I was the only one home, using youtube. If anyone could help I would apprectiate. Firmware is up to date, would getting a older version help? Maybe these aren't anything, just making sure. At the end it could just be bad isp, theyre really bad and overpriced.

 

DoS attack: ACK Scan] from source: 52.119.162.179:443 Sunday, February 23,2020 22:26:58
[DoS attack: ACK Scan] from source: 31.13.66.63:443 Sunday, February 23,2020 22:00:17

[DoS attack: ACK Scan] from source: 52.119.168.148:443 Sunday, February 23,2020 21:25:27

[DoS attack: ACK Scan] from source: 8.36.113.137:443 Sunday, February 23,2020 20:40:38
[DoS attack: ACK Scan] from source: 198.54.12.170:443 Sunday, February 23,2020 20:25:31
[DoS attack: ACK Scan] from source: 23.185.0.2:443 Sunday, February 23,2020 20:07:01
[DoS attack: ACK Scan] from source: 8.36.80.192:443 Sunday, February 23,2020 20:05:33
[DoS attack: ACK Scan] from source: 170.52.52.33:443 Sunday, February 23,2020 19:51:26
[DoS attack: ACK Scan] from source: 170.52.52.33:443 Sunday, February 23,2020 19:50:36

Model: R6700|Nighthawk AC1750 Smart WiFi Router
Message 1 of 2

Re: Getting DOS attack in logs, my internet disconnects everything in house including pc thats conne

Netgear's firmware is great at creating false reports of DoS attacks. Many of them are no such thing.

 

Search - NETGEAR Communities – DoS attacks

 

Use Whois.net to see who is behind some of them and you may find that they are from places like Facebook, Google, even your ISP.

 

Here is a useful tool for that task:

 

IPNetInfo: Retrieve IP Address Information from WHOIS servers

 

If these events are slowing down your router, that may be because it is using up processor time as it writes the events to your logs. Anything that uses processor power – event logging, QoS management, traffic metering – may cause slowdowns. Disable logging of DoS attacks and see if that reduces the problem. This does not prevent the router from protecting you from the outside world.

Just another user.

My network DM200 -> R7800 -> GS316 -> PL1000 -> Orbi RBR40 -> Orbi RBS50Y -> RBS40V
Message 2 of 2
Top Contributors
Discussion stats
  • 1 reply
  • 849 views
  • 1 kudo
  • 2 in conversation
Announcements

Orbi WiFi 6E