Orbi WiFi 7 RBE973
Reply

Re: Log help Netgear R6260

Sasquatch3000
Aspirant

Log help Netgear R6260

Looking at this log, I am hoping all these "DoS attack" logs are just reporting attempts at those intrusions that the router has repelled.Is this a normal amount? Using with a Charter/Spectrum Arris cable modem device.

 

Thank you.

 

[admin login] from source 192.168.1.7 Sunday, November 08,2020 19:31:46
[DHCP IP: (192.168.1.3)] to MAC address 94:9A:A9:80:22:B4 Sunday, November 08,2020 19:09:58
[DHCP IP: (192.168.1.7)] to MAC address 7C:DD:90:D7:D6:F2 Sunday, November 08,2020 19:09:51
[DoS attack: ACK Scan] from source: 23.193.41.80:443 Sunday, November 08,2020 17:31:25
[DHCP IP: (192.168.1.6)] to MAC address B6:16:20:89:1D:7A Sunday, November 08,2020 17:15:11
[DHCP IP: (192.168.1.15)] to MAC address C0:9A:D0:20:49:60 Sunday, November 08,2020 17:08:12
[DoS attack: ACK Scan] from source: 23.96.117.144:50002 Sunday, November 08,2020 16:45:01
[DHCP IP: (192.168.1.6)] to MAC address B6:16:20:89:1D:7A Sunday, November 08,2020 15:16:15
[DHCP IP: (192.168.1.10)] to MAC address 30:D9:D9:1C:B1:9B Sunday, November 08,2020 15:13:39
[DoS attack: ACK Scan] from source: 188.138.88.42:50002 Sunday, November 08,2020 14:33:11
[DHCP IP: (192.168.1.5)] to MAC address 14:95:CE:EF:FE:64 Sunday, November 08,2020 13:56:14
[DoS attack: ACK Scan] from source: 68.142.187.27:443 Sunday, November 08,2020 13:51:34
[DHCP IP: (192.168.1.8)] to MAC address A4:E9:75:6A:82:6B Sunday, November 08,2020 13:42:09
[DoS attack: ACK Scan] from source: 80.66.82.46:80 Sunday, November 08,2020 13:34:20
[DHCP IP: (192.168.1.6)] to MAC address B6:16:20:89:1D:7A Sunday, November 08,2020 13:01:46
[DoS attack: ACK Scan] from source: 23.96.117.144:50002 Sunday, November 08,2020 12:41:02
[DoS attack: ACK Scan] from source: 17.248.131.231:443 Sunday, November 08,2020 12:30:00
[DoS attack: ACK Scan] from source: 188.138.88.42:50002 Sunday, November 08,2020 12:24:18
[DoS attack: ACK Scan] from source: 188.138.88.42:50002 Sunday, November 08,2020 11:31:15
[DoS attack: ACK Scan] from source: 120.220.215.12:23333 Sunday, November 08,2020 11:25:26
[DoS attack: ACK Scan] from source: 188.138.88.42:50002 Sunday, November 08,2020 11:25:00
[DoS attack: ACK Scan] from source: 188.138.88.42:50002 Sunday, November 08,2020 11:22:58
[DoS attack: ACK Scan] from source: 23.96.117.186:50002 Sunday, November 08,2020 11:20:31
[DoS attack: ACK Scan] from source: 188.138.88.42:50002 Sunday, November 08,2020 11:18:54
[DoS attack: ACK Scan] from source: 188.138.88.42:50002 Sunday, November 08,2020 10:59:52
[DoS attack: ACK Scan] from source: 31.13.66.63:443 Sunday, November 08,2020 10:42:50
[DoS attack: ACK Scan] from source: 188.138.88.42:50002 Sunday, November 08,2020 10:40:38
[DHCP IP: (192.168.1.4)] to MAC address 52:A5:57:CF:9B:2A Sunday, November 08,2020 10:11:03
[DoS attack: ACK Scan] from source: 188.138.88.42:50002 Sunday, November 08,2020 10:09:12
[DoS attack: ACK Scan] from source: 45.81.235.31:22 Sunday, November 08,2020 10:06:18
[DoS attack: ACK Scan] from source: 149.202.92.133:5000 Sunday, November 08,2020 10:04:08
[DoS attack: ACK Scan] from source: 149.202.92.133:5000 Sunday, November 08,2020 10:01:55
[DHCP IP: (192.168.1.6)] to MAC address B6:16:20:89:1D:7A Sunday, November 08,2020 09:48:31
[DoS attack: ACK Scan] from source: 149.202.92.133:5000 Sunday, November 08,2020 09:36:51
[DHCP IP: (192.168.1.9)] to MAC address C6:5F:DD:1D:8C:F8 Sunday, November 08,2020 09:10:49
[DoS attack: ACK Scan] from source: 23.97.242.129:50002 Sunday, November 08,2020 08:49:20
[DoS attack: ACK Scan] from source: 23.97.242.129:50002 Sunday, November 08,2020 08:47:02
[DoS attack: ACK Scan] from source: 45.76.7.181:50002 Sunday, November 08,2020 08:33:03
[DHCP IP: (192.168.1.10)] to MAC address 30:D9:D9:1C:B1:9B Sunday, November 08,2020 07:51:44
[DHCP IP: (192.168.1.7)] to MAC address 7C:DD:90:D7:D6:F2 Sunday, November 08,2020 07:09:51
[DHCP IP: (192.168.1.3)] to MAC address 94:9A:A9:80:22:B4 Sunday, November 08,2020 07:09:47
[DoS attack: ACK Scan] from source: 69.171.250.20:443 Sunday, November 08,2020 07:01:09
[DoS attack: ACK Scan] from source: 69.171.250.20:443 Sunday, November 08,2020 06:59:06
[DoS attack: ACK Scan] from source: 69.171.250.20:443 Sunday, November 08,2020 06:50:54
[DoS attack: ACK Scan] from source: 69.171.250.20:443 Sunday, November 08,2020 06:48:51
[DoS attack: ACK Scan] from source: 69.171.250.20:443 Sunday, November 08,2020 06:47:21
[DoS attack: ACK Scan] from source: 69.171.250.20:443 Sunday, November 08,2020 06:47:00
[DoS attack: ACK Scan] from source: 69.171.250.20:443 Sunday, November 08,2020 06:45:57
[DoS attack: ACK Scan] from source: 188.138.88.42:50002 Sunday, November 08,2020 06:10:53
[DoS attack: ACK Scan] from source: 45.76.7.181:50002 Sunday, November 08,2020 05:32:25
[DoS attack: ACK Scan] from source: 23.96.117.144:50002 Sunday, November 08,2020 02:00:22
[DoS attack: ACK Scan] from source: 51.195.144.95:30120 Sunday, November 08,2020 01:56:21
[DHCP IP: (192.168.1.8)] to MAC address A4:E9:75:6A:82:6B Sunday, November 08,2020 01:15:56
[DoS attack: ACK Scan] from source: 45.119.81.125:443 Sunday, November 08,2020 00:23:06
[DoS attack: ACK Scan] from source: 17.248.185.104:443 Sunday, November 08,2020 00:02:37
[DoS attack: ACK Scan] from source: 17.248.185.104:443 Sunday, November 08,2020 00:02:17
[DoS attack: ACK Scan] from source: 31.13.66.63:443 Saturday, November 07,2020 23:09:34
[DoS attack: ACK Scan] from source: 31.13.66.63:443 Saturday, November 07,2020 23:09:06
[Time synchronized with NTP server time-a.netgear.com] Saturday, November 07,2020 22:49:24
[DoS attack: ACK Scan] from source: 17.248.185.8:443 Saturday, November 07,2020 22:27:12
[DHCP IP: (192.168.1.6)] to MAC address B6:16:20:89:1D:7A Saturday, November 07,2020 21:48:29
[DHCP IP: (192.168.1.10)] to MAC address 30:D9:D9:1C:B1:9B Saturday, November 07,2020 21:43:42
[DoS attack: ACK Scan] from source: 23.40.57.74:443 Saturday, November 07,2020 21:40:44
[DoS attack: ACK Scan] from source: 188.138.88.42:50002 Saturday, November 07,2020 21:31:42
[DHCP IP: (192.168.1.9)] to MAC address C6:5F:DD:1D:8C:F8 Saturday, November 07,2020 21:10:49
[DoS attack: ACK Scan] from source: 188.138.88.42:50002 Saturday, November 07,2020 20:50:49
[DoS attack: ACK Scan] from source: 69.147.92.12:443 Saturday, November 07,2020 20:24:03
[DoS attack: ACK Scan] from source: 69.147.92.12:443 Saturday, November 07,2020 20:23:11
[DoS attack: ACK Scan] from source: 23.33.181.38:443 Saturday, November 07,2020 20:22:08
[DoS attack: ACK Scan] from source: 23.193.41.80:443 Saturday, November 07,2020 20:00:12
[DoS attack: ACK Scan] from source: 23.193.41.80:443 Saturday, November 07,2020 19:59:42
[DoS attack: ACK Scan] from source: 188.138.88.42:50002 Saturday, November 07,2020 19:54:18
[DoS attack: ACK Scan] from source: 188.138.88.42:50002 Saturday, November 07,2020 19:51:01
[DHCP IP: (192.168.1.6)] to MAC address B6:16:20:89:1D:7A Saturday, November 07,2020 19:19:49
[DoS attack: ACK Scan] from source: 176.99.9.148:80 Saturday, November 07,2020 19:10:13
[DHCP IP: (192.168.1.7)] to MAC address 7C:DD:90:D7:D6:F2 Saturday, November 07,2020 19:09:50
[DHCP IP: (192.168.1.3)] to MAC address 94:9A:A9:80:22:B4 Saturday, November 07,2020 19:09:35
[UPnP set event:AddPortMapping] from source 192.168.1.12 Saturday, November 07,2020 17:52:13
[DHCP IP: (192.168.1.12)] to MAC address 60:45:BD:B1:4C:88 Saturday, November 07,2020 17:52:12
[UPnP set event:DeletePortMapping] from source 192.168.1.3 Saturday, November 07,2020 17:30:34
[DoS attack: ACK Scan] from source: 23.237.126.130:80 Saturday, November 07,2020 17:00:25
[DoS attack: ACK Scan] from source: 17.33.1.5:443 Saturday, November 07,2020 16:56:24
[UPnP set event:AddPortMapping] from source 192.168.1.3 Saturday, November 07,2020 16:42:54
[DoS attack: ACK Scan] from source: 31.13.66.63:443 Saturday, November 07,2020 16:31:45
[DoS attack: ACK Scan] from source: 17.253.144.10:443 Saturday, November 07,2020 15:02:47
[DoS attack: ACK Scan] from source: 93.115.150.169:53 Saturday, November 07,2020 14:50:02
[DoS attack: ACK Scan] from source: 67.195.205.49:993 Saturday, November 07,2020 14:44:57
[DoS attack: ACK Scan] from source: 17.248.131.229:443 Saturday, November 07,2020 14:38:36
[DHCP IP: (192.168.1.9)] to MAC address C6:5F:DD:1D:8C:F8 Saturday, November 07,2020 14:34:23
[DHCP IP: (192.168.1.15)] to MAC address C0:9A:D0:20:49:60 Saturday, November 07,2020 14:31:15
[DoS attack: ACK Scan] from source: 51.79.21.59:443 Saturday, November 07,2020 14:23:18
[UPnP set event:DeletePortMapping] from source 192.168.1.3 Saturday, November 07,2020 14:16:27
[DHCP IP: (192.168.1.6)] to MAC address B6:16:20:89:1D:7A Saturday, November 07,2020 14:14:26
[DoS attack: ACK Scan] from source: 147.160.181.66:443 Saturday, November 07,2020 14:07:29
[DoS attack: ACK Scan] from source: 17.248.131.201:443 Saturday, November 07,2020 13:57:19
[DHCP IP: (192.168.1.4)] to MAC address 52:A5:57:CF:9B:2A Saturday, November 07,2020 13:48:26
[DoS attack: ACK Scan] from source: 17.248.185.172:443 Saturday, November 07,2020 13:33:01
[DHCP IP: (192.168.1.9)] to MAC address C6:5F:DD:1D:8C:F8 Saturday, November 07,2020 13:28:34
[DoS attack: ACK Scan] from source: 17.248.185.169:443 Saturday, November 07,2020 13:22:10
[DoS attack: ACK Scan] from source: 67.195.205.49:993 Saturday, November 07,2020 13:20:58
[DHCP IP: (192.168.1.8)] to MAC address A4:E9:75:6A:82:6B Saturday, November 07,2020 13:02:42
[DoS attack: ACK Scan] from source: 202.69.171.52:47559 Saturday, November 07,2020 12:30:48
[DoS attack: ACK Scan] from source: 17.253.20.213:443 Saturday, November 07,2020 12:25:02
[DoS attack: ACK Scan] from source: 17.253.20.213:443 Saturday, November 07,2020 12:23:58
[DoS attack: ACK Scan] from source: 31.13.66.63:443 Saturday, November 07,2020 12:23:37
[DoS attack: ACK Scan] from source: 31.13.66.63:443 Saturday, November 07,2020 12:22:49
[DoS attack: ACK Scan] from source: 17.253.20.213:443 Saturday, November 07,2020 12:20:46
[DoS attack: ACK Scan] from source: 209.85.201.139:443 Saturday, November 07,2020 12:20:21
[DoS attack: ACK Scan] from source: 209.85.201.139:443 Saturday, November 07,2020 12:19:50
[DHCP IP: (192.168.1.5)] to MAC address 14:95:CE:EF:FE:64 Saturday, November 07,2020 12:17:55
[WLAN access rejected: incorrect security] from MAC address 40:83:1d:d3:ba:5d Saturday, November 07,2020 11:51:26
[WLAN access rejected: incorrect security] from MAC address 40:83:1d:d3:ba:5d Saturday, November 07,2020 11:51:25
[WLAN access rejected: incorrect security] from MAC address 40:83:1d:d3:ba:5d Saturday, November 07,2020 11:51:24
[WLAN access rejected: incorrect security] from MAC address 40:83:1d:d3:ba:5d Saturday, November 07,2020 11:51:23
[DoS attack: ACK Scan] from source: 17.248.185.48:443 Saturday, November 07,2020 11:51:15
[WLAN access rejected: incorrect security] from MAC address 40:83:1d:d3:ba:5d Saturday, November 07,2020 11:51:07
[WLAN access rejected: incorrect security] from MAC address 40:83:1d:d3:ba:5d Saturday, November 07,2020 11:51:06
[WLAN access rejected: incorrect security] from MAC address 40:83:1d:d3:ba:5d Saturday, November 07,2020 11:51:05
[WLAN access rejected: incorrect security] from MAC address 40:83:1d:d3:ba:5d Saturday, November 07,2020 11:51:04
[WLAN access rejected: incorrect security] from MAC address 40:83:1d:d3:ba:5d Saturday, November 07,2020 11:50:25
[WLAN access rejected: incorrect security] from MAC address 40:83:1d:d3:ba:5d Saturday, November 07,2020 11:50:24
[WLAN access rejected: incorrect security] from MAC address 40:83:1d:d3:ba:5d Saturday, November 07,2020 11:50:23
[WLAN access rejected: incorrect security] from MAC address 40:83:1d:d3:ba:5d Saturday, November 07,2020 11:50:22
[DHCP IP: (192.168.1.9)] to MAC address C6:5F:DD:1D:8C:F8 Saturday, November 07,2020 11:37:39
[UPnP set event:AddPortMapping] from source 192.168.1.3 Saturday, November 07,2020 11:25:35
[UPnP set event:DeletePortMapping] from source 192.168.1.3 Saturday, November 07,2020 11:20:29
[DHCP IP: (192.168.1.4)] to MAC address 52:A5:57:CF:9B:2A Saturday, November 07,2020 11:17:58
[DoS attack: ACK Scan] from source: 184.24.156.105:443 Saturday, November 07,2020 10:50:59
[DoS attack: ACK Scan] from source: 184.24.156.105:443 Saturday, November 07,2020 10:47:05
[DoS attack: ACK Scan] from source: 184.24.156.105:443 Saturday, November 07,2020 10:21:38
[DoS attack: ACK Scan] from source: 203.107.43.76:80 Saturday, November 07,2020 10:06:36
[DHCP IP: (192.168.1.4)] to MAC address 52:A5:57:CF:9B:2A Saturday, November 07,2020 09:34:42
[DHCP IP: (192.168.1.10)] to MAC address 30:D9:D9:1C:B1:9B Saturday, November 07,2020 09:18:33
[UPnP set event:AddPortMapping] from source 192.168.1.3 Saturday, November 07,2020 09:08:55
[DHCP IP: (192.168.1.4)] to MAC address 52:A5:57:CF:9B:2A Saturday, November 07,2020 09:08:31
[DHCP IP: (192.168.1.6)] to MAC address B6:16:20:89:1D:7A Saturday, November 07,2020 08:57:18
[DHCP IP: (192.168.1.4)] to MAC address 52:A5:57:CF:9B:2A Saturday, November 07,2020 08:56:20
[DoS attack: ACK Scan] from source: 23.50.229.24:443 Saturday, November 07,2020 08:47:17
[DoS attack: ACK Scan] from source: 202.69.171.52:9265 Saturday, November 07,2020 08:42:34
[DoS attack: ACK Scan] from source: 51.79.73.3:55555 Saturday, November 07,2020 08:40:25
[DoS attack: ACK Scan] from source: 202.69.171.52:47917 Saturday, November 07,2020 08:13:11
[DoS attack: ACK Scan] from source: 52.7.248.213:443 Saturday, November 07,2020 08:07:54
[DoS attack: ACK Scan] from source: 54.146.71.153:443 Saturday, November 07,2020 07:59:29
[DoS attack: ACK Scan] from source: 17.248.241.4:443 Saturday, November 07,2020 07:55:31
[DoS attack: ACK Scan] from source: 52.7.248.213:443 Saturday, November 07,2020 07:47:15
[DHCP IP: (192.168.1.7)] to MAC address 7C:DD:90:D7:D6:F2 Saturday, November 07,2020 07:09:49
[DHCP IP: (192.168.1.3)] to MAC address 94:9A:A9:80:22:B4 Saturday, November 07,2020 07:09:35
[DoS attack: ACK Scan] from source: 184.24.156.105:443 Saturday, November 07,2020 06:42:39
[DHCP IP: (192.168.1.4)] to MAC address 52:A5:57:CF:9B:2A Saturday, November 07,2020 05:56:30
[DoS attack: ACK Scan] from source: 148.66.146.44:443 Saturday, November 07,2020 05:43:45
[DoS attack: ACK Scan] from source: 148.66.146.44:443 Saturday, November 07,2020 05:32:56
[DoS attack: ACK Scan] from source: 148.66.146.44:443 Saturday, November 07,2020 05:28:09
[DoS attack: ACK Scan] from source: 148.66.146.44:443 Saturday, November 07,2020 05:23:31
[DoS attack: ACK Scan] from source: 17.253.20.119:443 Saturday, November 07,2020 04:21:01
[DoS attack: ACK Scan] from source: 116.202.120.166:443 Saturday, November 07,2020 03:58:03
[DoS attack: ACK Scan] from source: 17.248.131.240:443 Saturday, November 07,2020 03:46:10
[DoS attack: ACK Scan] from source: 178.33.19.1:80 Saturday, November 07,2020 03:33:39
[DoS attack: ACK Scan] from source: 17.253.20.247:443 Saturday, November 07,2020 03:20:44
[DoS attack: ACK Scan] from source: 17.248.131.23:443 Saturday, November 07,2020 03:15:44
[DHCP IP: (192.168.1.6)] to MAC address B6:16:20:89:1D:7A Saturday, November 07,2020 02:13:11
[DHCP IP: (192.168.1.8)] to MAC address A4:E9:75:6A:82:6B Saturday, November 07,2020 00:53:10
[DHCP IP: (192.168.1.10)] to MAC address 30:D9:D9:1C:B1:9B Saturday, November 07,2020 00:40:00
[DoS attack: ACK Scan] from source: 17.248.185.100:443 Saturday, November 07,2020 00:39:45
[DoS attack: ACK Scan] from source: 23.193.41.80:443 Saturday, November 07,2020 00:37:42
[DoS attack: ACK Scan] from source: 93.115.150.169:53 Saturday, November 07,2020 00:25:05
[UPnP set event:DeletePortMapping] from source 192.168.1.3 Saturday, November 07,2020 00:23:28
[DHCP IP: (192.168.1.5)] to MAC address 14:95:CE:EF:FE:64 Saturday, November 07,2020 00:17:55
[DoS attack: ACK Scan] from source: 17.253.144.10:443 Saturday, November 07,2020 00:14:52
[DoS attack: ACK Scan] from source: 74.6.106.26:993 Saturday, November 07,2020 00:02:27
[DoS attack: ACK Scan] from source: 23.193.33.80:443 Saturday, November 07,2020 00:01:19

Model: R6260|AC1600 Smart WiFi Router Dual Band Gigabit
Message 1 of 5
Sasquatch3000
Aspirant

Re: Log help Netgear R6260

bump

Model: R6260|AC1600 Smart WiFi Router Dual Band Gigabit
Message 2 of 5
Sasquatch3000
Aspirant

Re: Log help Netgear R6260

Anybody?

Model: R6260|AC1600 Smart WiFi Router Dual Band Gigabit
Message 3 of 5

Re: Log help Netgear R6260


@Sasquatch3000 wrote:

Anybody?


Give us a break. No one pays us to do this stuff.

 

Being impatient, you could have made life easier for yourself with a search of this forum.

 

Something simple like "DoS attack" would have found this oft repeated reply.

 

Netgear's firmware is great at creating false reports of DoS attacks. Many of them are no such thing.

 

Search - NETGEAR Communities – DoS attacks

 

Use Whois.net to see who is behind some of them and you may find that they are from places like Facebook, Google, even your ISP.

 

Here is a useful tool for that task:

 

IPNetInfo: Retrieve IP Address Information from WHOIS servers

 

If these events are slowing down your router, that may be because it is using up processor time as it writes the events to your logs. Anything that uses processor power – event logging, QoS management, traffic metering – may cause slowdowns. Disable logging of DoS attacks and see if that reduces the problem. This does not prevent the router from protecting you from the outside world.

 

 

Message 4 of 5
Sasquatch3000
Aspirant

Re: Log help Netgear R6260

So, "false positives" eh? I guess that kind of makes sense, but if it is such a problem for so many, you would think they might work on lessening that aspect of the software.

 

Thanks for your answer. Sorry to sound impatient. Most forums I belong to, you get about a dozen answers by a couple hours in. I guess this one is a bit different.

 

The statement about processing power to write to a log file, while sure it probably exists, but it is not doing rocket science, just writing out basically a text file, and not all that much at that. It would be cool to see an OS-like function like Windows' Task Manager for this, so one can see what is consuming processing cycles.

 

Thanks again.

Message 5 of 5
Top Contributors
Discussion stats
  • 4 replies
  • 643 views
  • 1 kudo
  • 2 in conversation
Announcements

Orbi WiFi 7