Reply
PhantomMarth
Aspirant

Slow/Inconsistent Wifi. DoS attack!

Please help!! My wifi keeps restarting!! This is my log.

[DHCP IP: 10.0.0.11] to MAC address cc:6e:a4:4a:7f:72, Sunday, August 30, 2020 18:19:11
[DoS Attack: ACK Scan] from source: 199.127.204.100, port 443, Sunday, August 30, 2020 18:18:56
[DoS Attack: ACK Scan] from source: 192.229.173.16, port 443, Sunday, August 30, 2020 18:18:35
[DoS Attack: ACK Scan] from source: 192.229.210.163, port 443, Sunday, August 30, 2020 18:18:34
[DoS Attack: ACK Scan] from source: 192.229.173.16, port 443, Sunday, August 30, 2020 18:18:33
[DoS Attack: ACK Scan] from source: 192.229.210.163, port 443, Sunday, August 30, 2020 18:18:32
[DoS Attack: ACK Scan] from source: 192.229.173.16, port 443, Sunday, August 30, 2020 18:18:31
[DoS Attack: ACK Scan] from source: 192.229.210.163, port 443, Sunday, August 30, 2020 18:18:30
[DoS Attack: ACK Scan] from source: 192.229.173.16, port 443, Sunday, August 30, 2020 18:18:29
[DoS Attack: ACK Scan] from source: 192.229.210.163, port 443, Sunday, August 30, 2020 18:18:28
[DoS Attack: ACK Scan] from source: 192.229.173.16, port 443, Sunday, August 30, 2020 18:18:27
[DoS Attack: ACK Scan] from source: 192.229.210.163, port 443, Sunday, August 30, 2020 18:18:26
[DoS Attack: ACK Scan] from source: 52.223.227.178, port 443, Sunday, August 30, 2020 18:18:13
[admin login] from source 10.0.0.10, Sunday, August 30, 2020 18:18:07
[DoS Attack: ACK Scan] from source: 199.127.204.100, port 443, Sunday, August 30, 2020 18:17:52
[DHCP IP: 10.0.0.10] to MAC address b4:2e:99:fa:b2:47, Sunday, August 30, 2020 18:17:45
[DoS Attack: ACK Scan] from source: 103.103.41.145, port 443, Sunday, August 30, 2020 18:16:39
[DHCP IP: 10.0.0.14] to MAC address 7c:a1:ae:72:0f:d9, Sunday, August 30, 2020 18:16:21
[DoS Attack: ACK Scan] from source: 103.103.41.145, port 443, Sunday, August 30, 2020 18:09:01
[DoS Attack: ACK Scan] from source: 103.103.40.68, port 443, Sunday, August 30, 2020 18:07:31
[DHCP IP: 10.0.0.14] to MAC address 7c:a1:ae:72:0f:d9, Sunday, August 30, 2020 18:07:24
[DoS Attack: ACK Scan] from source: 103.103.41.88, port 443, Sunday, August 30, 2020 18:04:15
[DHCP IP: 10.0.0.14] to MAC address 7c:a1:ae:72:0f:d9, Sunday, August 30, 2020 17:57:29
[DoS Attack: RST Scan] from source: 13.89.117.20, port 443, Sunday, August 30, 2020 17:56:43
[DHCP IP: 10.0.0.14] to MAC address 7c:a1:ae:72:0f:d9, Sunday, August 30, 2020 17:56:24
[DoS Attack: ACK Scan] from source: 103.103.40.145, port 443, Sunday, August 30, 2020 17:55:45
[DHCP IP: 10.0.0.11] to MAC address cc:6e:a4:4a:7f:72, Sunday, August 30, 2020 17:54:11
[DoS Attack: ACK Scan] from source: 103.103.40.68, port 443, Sunday, August 30, 2020 17:50:09
[DoS Attack: ACK Scan] from source: 52.223.227.178, port 443, Sunday, August 30, 2020 17:46:58
[DHCP IP: 10.0.0.10] to MAC address b4:2e:99:fa:b2:47, Sunday, August 30, 2020 17:46:28
[DHCP IP: 10.0.0.14] to MAC address 7c:a1:ae:72:0f:d9, Sunday, August 30, 2020 17:45:15
[DoS Attack: TCP/UDP Echo] from source: 45.79.82.183, port 52189, Sunday, August 30, 2020 17:42:42
[DHCP IP: 10.0.0.14] to MAC address 7c:a1:ae:72:0f:d9, Sunday, August 30, 2020 17:42:39
[DoS Attack: RST Scan] from source: 3.11.183.67, port 443, Sunday, August 30, 2020 17:39:10
[DoS Attack: ACK Scan] from source: 103.103.41.88, port 443, Sunday, August 30, 2020 17:39:07
[DHCP IP: 10.0.0.11] to MAC address cc:6e:a4:4a:7f:72, Sunday, August 30, 2020 17:29:16
[DHCP IP: 10.0.0.14] to MAC address 7c:a1:ae:72:0f:d9, Sunday, August 30, 2020 17:12:24
[DoS Attack: SYN/ACK Scan] from source: 217.21.52.8, port 25, Sunday, August 30, 2020 17:05:55
[DHCP IP: 10.0.0.11] to MAC address cc:6e:a4:4a:7f:72, Sunday, August 30, 2020 17:04:16
[DoS Attack: RST Scan] from source: 3.11.183.67, port 443, Sunday, August 30, 2020 17:04:06
[DHCP IP: 10.0.0.14] to MAC address 7c:a1:ae:72:0f:d9, Sunday, August 30, 2020 16:51:20

 

Model: RBR50|Orbi AC3000 Tri-band WiFi Router
Message 1 of 2
FURRYe38
Guru

Re: Slow/Inconsistent Wifi. DoS attack!

What Firmware version is currently loaded?
What is the Mfr and model# of the Internet Service Providers modem/ONT the NG router is connected too?

IF your modem has a built in router, This would be a double NAT (two router) condition which isn't recommended. https://kb.netgear.com/30186/What-is-Double-NAT
https://kb.netgear.com/30187/How-to-fix-issues-with-Double-NAT
Couple of options,
1. Configure the modem for transparent bridge or modem only mode. Then use the Orbi router in router mode. You'll need to contact the ISP for help and information in regards to the modem being bridged correctly.
2. If you can't bridge the modem, disable ALL wifi radios on the modem, configure the modems DMZ/ExposedHost or IP Pass-Through for the IP address the Orbi router gets from the modem. Then you can use the Orbi router in Router mode.
3. Or disable all wifi radios on the modem and connect the Orbi router to the modem, configure AP mode on the Orbi router. https://kb.netgear.com/31218/How-do-I-configure-my-Orbi-router-to-act-as-an-access-point and https://www.youtube.com/watch?v=H7LOcJ8GdDo&app=desktop 

 

What is the distance between the router and satellite(s)? 30 feet or more is recommended in between RBR and RBS to begin with depending upon building materials when wirelessly connected. https://kb.netgear.com/000036466/How-far-should-I-place-my-Orbi-satellite-from-my-Orbi-router

 

What channels are you using? Auto? Try setting manual channel 1, 6 or 11 on 2.4Ghz and any unused channel on 5Ghz.
Any Wifi Neighbors near by? If so, how many?

 

Has a factory reset and setup from scratch been performed since last FW update? 

My Setup (Cable 1Gbps/50Mbps)>CM1200 v2.02.03(LAG Disabled)>RBK853 v3.2.17.12
RBK50 v2.7.2.104(WW) Circle Enabled
Additional NG HW: C7800/CM1100/CAX80/CM2000, Orbi CBK40, R7800, R7960P, EX7500/EX7700, XR450 and WNHDE111
Message 2 of 2
Top Contributors
Discussion stats
  • 1 reply
  • 325 views
  • 0 kudos
  • 2 in conversation
Announcements