Orbi WiFi 7 RBE973
Reply

How concerned do I need to be about DoS attack: ACK Scan listed in my admin log?

EB4ME
Follower

How concerned do I need to be about DoS attack: ACK Scan listed in my admin log?

I haven't had any reason to make any changes to my router since I got it, so I hardley ever log on to review the settings. I just loged in to upgrade the firmware due to my connections being slow and viewed my router log while I was there.  I found thisd:

 

[DHCP IP: (192.168.1.6)] to MAC address 8C:45:00:91:8D:60, Saturday, Feb 27,2021 11:40:57
[DoS attack: ACK Scan] from source 104.18.27.211,port 443 Saturday, Feb 27,2021 11:40:27
[DoS attack: ACK Scan] from source 151.101.197.176,port 443 Saturday, Feb 27,2021 11:39:29
[admin login] from source 192.168.1.5, Saturday, Feb 27,2021 11:38:00
[DoS attack: ACK Scan] from source 104.18.26.211,port 443 Saturday, Feb 27,2021 11:37:35
[DHCP IP: (192.168.1.5)] to MAC address B0:10:41:BA:78:15, Saturday, Feb 27,2021 11:37:06
[DoS attack: ACK Scan] from source 54.86.147.49,port 9998 Saturday, Feb 27,2021 11:36:45
[DHCP IP: (192.168.1.2)] to MAC address 34:15:13:C0:BE:3D, Saturday, Feb 27,2021 11:36:42
[DoS attack: ACK Scan] from source 52.42.23.122,port 8883 Saturday, Feb 27,2021 11:36:24
[DHCP IP: (192.168.1.3)] to MAC address AC:67:B2:08:7D:A0, Saturday, Feb 27,2021 11:36:23
[DHCP IP: (192.168.1.2)] to MAC address 34:15:13:C0:BE:3D, Saturday, Feb 27,2021 11:36:23
[DoS attack: ACK Scan] from source 44.239.132.216,port 8883 Saturday, Feb 27,2021 11:36:22
[DHCP IP: (192.168.1.4)] to MAC address 00:D0:2D:C5:73:E1, Saturday, Feb 27,2021 11:36:22
[DoS attack: ACK Scan] from source 34.214.134.102,port 8883 Saturday, Feb 27,2021 11:36:21
[DoS attack: ACK Scan] from source 44.239.132.216,port 8883 Saturday, Feb 27,2021 11:36:21
[DoS attack: ACK Scan] from source 34.214.134.102,port 8883 Saturday, Feb 27,2021 11:36:20
[DoS attack: ACK Scan] from source 34.211.128.183,port 8883 Saturday, Feb 27,2021 11:36:18
[Internet connected] IP address: 24.24.225.191, Saturday, Feb 27,2021 11:36:17
[Time synchronized with NTP server] Saturday, Feb 27,2021 11:36:11
[DHCP IP: (192.168.1.3)] to MAC address AC:67:B2:08:7D:A0, Saturday, Feb 27,2021 11:36:04
[Internet disconnected] Saturday, Feb 27,2021 11:36:03
[DHCP IP: (192.168.1.2)] to MAC address 34:15:13:C0:BE:3D, Saturday, Feb 27,2021 11:36:02
[Initialized, firmware version: V1.4.1.68_1.3.28] Saturday, Feb 27,2021 11:35:58

 

I really don't know that much about Router details when it comes to security settings other than the Netgear instructions I followed when I originally set it up. I tried researching some information here but I've read conflicting information as to whether I have a problem or not. I even took a look at a tool called IPNetinfo to see what's happening but when I researched it, I found out that it contains some type of malware and i shouldn't use it. Can anyone give me some help to let me know if I should be concerned, and if so, what I need to do?

Thanks

Model: R7900P|Nighthawk X6S AC3000 Tri Band WiFi Router
Message 1 of 2

Re: How concerned do I need to be about DoS attack: ACK Scan listed in my admin log?

Netgear's firmware is great at creating false reports of DoS attacks. Many of them are no such thing.

 

Search - NETGEAR Communities – DoS attacks

 

Use Whois.net to see who is behind some of them and you may find that they are from places like Facebook, Google, even your ISP.

 

Here is a useful tool for that task:

 

IPNetInfo: Retrieve IP Address Information from WHOIS servers

 

The external sites in your list look safe.

 

If these events are slowing down your router, that may be because it is using up processor time as it writes the events to your logs. Anything that uses processor power – event logging, QoS management, traffic metering – may cause slowdowns. Disable logging of DoS attacks and see if that reduces the problem. This does not prevent the router from protecting you from the outside world.

 

Message 2 of 2
Top Contributors
Discussion stats
  • 1 reply
  • 658 views
  • 0 kudos
  • 2 in conversation
Announcements

Orbi WiFi 7