NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
umeweall
Aug 14, 2018Aspirant
What is access log actually showing
I have a Nighthawk, R6700 v2 wireless router. When looking at the access log, I have a question on what is appearing there. Are the items displayed simply items that attempted connection, or are th...
- Aug 15, 2018
DoS attacks are blocked, period, but are logged. You should not have "Disable Port Scan and DoS Protection" checked on the Advanced tab, on left Setup, WAN setup page. If you uncheck that box you lose that protection and they will get in. No need to block that IP Address as long as that box is unchecked, router never lets them in to even be blocked.
If they ARE legitimate and the router rejected a valid packet, TCP/IP is smart enough to regenerate the packet and it eventually gets to you. If logging in, you might notice it took longer.Multiple DoS entry seconds apart are more than likely to be a real attack, although in some cases it is just someone trying ping you I think. If they are very fast, seconds apart, the router is supposed to shutdown entry for everything for a few minutes, but I have NEVER seen that happen.
umeweall
Aug 15, 2018Aspirant
Yes, you are correct on that! I spent time looking at my log, doing the standard 'whois', to see what my connection activity was. I learned to recognize the 'standard' ranges from Google, Carbonite, Amazon, and other standard sites, for which I made connections with. I also learned to identify folks that I was not interested in.
For anyone that is looking for a good toolset site to use (and I know there are many out there), a good one is here: https://www.ultratools.com/ .
IrvSp
Aug 15, 2018Master
umeweall wrote:
Yes, you are correct on that! I spent time looking at my log, doing the standard 'whois', to see what my connection activity was. I learned to recognize the 'standard' ranges from Google, Carbonite, Amazon, and other standard sites, for which I made connections with. I also learned to identify folks that I was not interested in.
For anyone that is looking for a good toolset site to use (and I know there are many out there), a good one is here: https://www.ultratools.com/ .
Unfortunately you can't always tell as many sites will use 3rd party IP Address as well... Akamai is one. Many are not in the US either.