NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Orbi RBR50 Dropping Internet Connection Regularly
I have an Orbi RBR50 and RBS50 connected via wireless backhaul. They have been working perfectly for a year. For the past two weeks, the router has been dropping the Internet connection regularly, ...
I just upgraded to V2.3.1.48 and did factory reset on Router (not satelites).
My router is loosing connection to interenet and restart is fixing the problem before. Since router is causing the problem, I did factory reset on Router only.
After upgrading and performing factory reset on the router (4/27), today it dropped connection (5/2). Routine, restarting router worked.
Firmware version: V2.3.1.48
I don't have an option to reduce lease time. Its not editable for me.
I don't see any logs. Here is the logs after restart router.
[admin login] from source 192.168.1.8, Friday, May 03, 2019 02:59:36
[Time synchronized with NTP server] Friday, May 03, 2019 02:43:01
[Initialized, firmware version: V2.3.1.48] Friday, May 03, 2019 02:42:42
Harryp123 wrote:
I don't have an option to reduce lease time. Its not editable for me.
There is no option to change the lease time in the web GUI. You need to use telnet to make the change. Please see the previous post:
It dropped connection again and here is the logs:
[DoS Attack: ACK Scan] from source: 18.208.129.192, port 3128, Saturday, May 04, 2019 08:38:38
[DHCP IP: 192.168.1.23] to MAC address 9c:04:eb:82:58:c1, Saturday, May 04, 2019 08:37:44
[DoS Attack: ACK Scan] from source: 18.208.129.192, port 3128, Saturday, May 04, 2019 08:29:28
[DHCP IP: 192.168.1.25] to MAC address 4c:bb:58:41:c7:35, Saturday, May 04, 2019 08:25:50
[DoS Attack: SYN/ACK Scan] from source: 221.204.226.157, port 80, Saturday, May 04, 2019 08:12:09
[DHCP IP: 192.168.1.23] to MAC address 9c:04:eb:82:58:c1, Saturday, May 04, 2019 08:08:21
[DHCP IP: 192.168.1.25] to MAC address 4c:bb:58:41:c7:35, Saturday, May 04, 2019 07:58:40Can you find out where this IP address is coming from?
18.208.129.192
Domaintools.com
Might ask your ISP to change your WAN IP address on the modem...
Harryp123 wrote:
It dropped connection again and here is the logs:
[DoS Attack: ACK Scan] from source: 18.208.129.192, port 3128, Saturday, May 04, 2019 08:38:38
[DHCP IP: 192.168.1.23] to MAC address 9c:04:eb:82:58:c1, Saturday, May 04, 2019 08:37:44
[DoS Attack: ACK Scan] from source: 18.208.129.192, port 3128, Saturday, May 04, 2019 08:29:28
[DHCP IP: 192.168.1.25] to MAC address 4c:bb:58:41:c7:35, Saturday, May 04, 2019 08:25:50
[DoS Attack: SYN/ACK Scan] from source: 221.204.226.157, port 80, Saturday, May 04, 2019 08:12:09
[DHCP IP: 192.168.1.23] to MAC address 9c:04:eb:82:58:c1, Saturday, May 04, 2019 08:08:21
[DHCP IP: 192.168.1.25] to MAC address 4c:bb:58:41:c7:35, Saturday, May 04, 2019 07:58:40I am not sure how to check where this IP address is coming from. Reg: "18.208.129.192".
Can you please guide me?
Thanks
Inout that IP address here:
Please find attached "Whois" responses for Dos Attack ip address.
I have seen few of them. This thread not allowing to add multiple files.
Internet connection still dropping.
Today one of the satellite lost connection. I had to unplug power and resync it.
I would contact your ISP and have them change your WAN IP address to something else to see if these attacks continue or go away.
What devices do you have connected to the Orbi on the LAN side?Any amazon services that you use or amazon devices?
What Firmware is currently loaded?
What is the Mfr and model# of the FIOS modem the NG router is connected too?
Harryp123 wrote:
Internet connection still dropping.
Today one of the satellite lost connection. I had to unplug power and resync it.
- FWIW, I see DOS attacks in my log as well. No connection issues I can detect.
I would contact your ISP and have them change your WAN IP address to something else to see if these attacks continue or go away.
-- Contacted verizon and changed WAN IP address
What devices do you have connected to the Orbi on the LAN side?-- Windows computers, Mac Book, iPhones, Samsung TV, Samsung Galaxy tab, Ring Doorb ell & camera, Google Chrome
Any amazon services that you use or amazon devices?
-- No special amazon services (like streaming - fire stick etc)
What Firmware is currently loaded?
-- V2.3.1.60 (Updated today)
What is the Mfr and model# of the FIOS modem the NG router is connected too?-- Verizon Fios modem from verizon (not sure what is the model #)
See any attacks in the logs now after a IP change and FW update?
any model number printed on the ISP Modem or sticker that lists the model number of the modem?
[DoS Attack: TCP/UDP Chargen] from source: 45.79.128.218, port 42690, Wednesday, May 08, 2019 20:42:45
[DoS Attack: ACK Scan] from source: 31.13.71.49, port 443, Wednesday, May 08, 2019 18:50:47
[DoS Attack: ACK Scan] from source: 190.106.206.50, port 443, Wednesday, May 08, 2019 17:44:33
Harryp123 wrote:
[DoS Attack: TCP/UDP Chargen] from source: 45.79.128.218, port 42690, Wednesday, May 08, 2019 20:42:45
[DoS Attack: ACK Scan] from source: 31.13.71.49, port 443, Wednesday, May 08, 2019 18:50:47
[DoS Attack: ACK Scan] from source: 190.106.206.50, port 443, Wednesday, May 08, 2019 17:44:33
Does your Internet connection starts acting up within this time window by any chance?
Not sure. It didn't disconnect. So not sure what kind of oddness we are lookoing for and how to identify.
Harryp123 wrote:
[DoS Attack: TCP/UDP Chargen] from source: 45.79.128.218, port 42690, Wednesday, May 08, 2019 20:42:45
NetRange: 45.79.0.0 - 45.79.255.255
CIDR: 45.79.0.0/16
NetName: LINODE-US
NetHandle: NET-45-79-0-0-1
Parent: NET45 (NET-45-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS3595, AS21844, AS8001, AS6939
Organization: Linode (LINOD)
RegDate: 2015-04-29
Updated: 2015-04-29
Comment: Linode, LLC
Comment: http://www.linode.com
Ref: https://rdap.arin.net/registry/ip/45.79.0.0[DoS Attack: ACK Scan] from source: 31.13.71.49, port 443, Wednesday, May 08, 2019 18:50:47
inetnum: 31.13.71.0 - 31.13.71.255
netname: LGA1
descr: Facebook
country: US
admin-c: RD4299-RIPE
tech-c: RD4299-RIPE
status: ASSIGNED PA
mnt-by: fb-neteng
mnt-lower: fb-neteng
mnt-routes: fb-neteng
created: 2014-06-11T18:48:31Z
last-modified: 2014-06-11T18:48:31Z
source: RIPE[DoS Attack: ACK Scan] from source: 190.106.206.50, port 443, Wednesday, May 08, 2019 17:44:33
inetnum: 190.106.206.48/28
status: reallocated
owner: AGENCIAS JI COHEN
ownerid: GT-AJCO-LACNIC
responsible: Joshua Cuevas
address: 20 AV 5-51 Zona 14, ,
address: 01014 - GUATEMALA -
country: GT
phone: +502 23281000 []
owner-c: SAB3
tech-c: SAB3
abuse-c: SAB3
created: 20160711
changed: 20160711
inetnum-up: 190.106.192/19I wonder why you send me all these crappy, non interesting questions that you send to all who complain about your Orbi-concept?
To me it makes you look even more unserious, than the feeling I already get from using the router and three satellites that have to be rebooted on a daily basis.
Are you here just to rant or do you want to sort out a problem?
rolf_berg wrote:
I wonder why you send me all these crappy, non interesting questions that you send to all who complain about your Orbi-concept?
Questions are there to try to track down the cause of problems. Sadly, too many people provide poor information that makes it hard to determine what is going on.
To me it makes you look even more unserious, than the feeling I already get from using the router and three satellites that have to be rebooted on a daily basis.
You don't look all that serious yourself if you cannot tell the difference between Netgear's support people and the fellow users who post most of the messages that are trying to help solve problems.
It is also hard to take someone seriously when they join in on a conversation that has been running for nearly a year. Did you even read the messages before yours?
If it isn't too late, take the stuff back to the shop and look for something that is easier to use.
...and what do you think? But when you ask about how big my house is etc. it is totally unserious. I am an IT-professional myself.
rolf_berg wrote:
I am an IT-professional myself.
Ah, that get out of jail card.
Some of the questions may not seem relevant to you. But they are refined in many sessions dealing with people who turn up providing poor details of what is going on.
By all means carry on moaning. But forgive the rest of us if we get on with trying to help people.
But your assistance is totally meaningless and just a waste of time. The Orbi-solution suffers from bad firmware. And someone should fix it asap. Otherwise my four units will be returned.
