NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
IP Spoofing
Hi. Can some please advise/help me? We are having trouble with our wifi connection. I have gone into the log and we have the following [DoS Attack: IP Spoofing] from source: 10.0.0.15, p...
Hi all.
Thanks for all the advice.
I live in the UK and have BT Broadband. Originally I set it up so it would sync using the BT router and then turn off the wifi on the BT router and use the Orbi network.
So now, I have removed the BT router from the network and plugged in a BT Openreach modem and use the Orbi's to connect to the internet. All of the attacks have stopped, but now I have these. Probably not at bad though!
[DoS Attack: ARP Attack] from source: 192.168.1.1, Sunday, December 27, 2020 11:59:52
[DoS Attack: SYN/ACK Scan] from source: 192.95.9.25, port 22, Sunday, December 27, 2020 11:58:57
[DoS Attack: SYN/ACK Scan] from source: 192.95.9.30, port 22, Sunday, December 27, 2020 11:57:27
[DoS Attack: ACK Scan] from source: 52.51.76.79, port 443, Sunday, December 27, 2020 11:54:16
My Orbi has logged 1,705 various "attacks" so far this month, an average of about 63 per day. People have expressed various opinions about these log entries, such as:
- Analyzing packets with the Orbi firewall consumes CPU cycles that could be used for "other things" so it is better to quit logging them.
- Netgear's firewall analysis flags too many "attacks" that are not really attacks.
- The Orbi doesn't accept connection requests (unless ports are "opened" on purpose), so the exercise is pointless.
I have never found documentation about how this feature actually works or how these "attacks" are defined. (such as how many connection attempts does it take to be considered an "attack"? one? 100? over what period of time?)
I did try to compare the Orbi iptables rules with and without logging and was unable to discover obvious differences, so I don't have evidence on whether CPU load is affected a little or a lot.
The more relevant question is your WiFi performance. Has it improved?
Yes the wifi and everything is improved. All I can think, it the IP address I was issued with BT, was being hit alot by hackers. I only have had 10 attempts in about 2 hours. Im more than happy with that. I just hope it lasts, as this has caused me so much stress, as I am normally good at fixing things and this has blown my mind!