NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
C6900 - Repeated DOS Attacks from same source ip
My home internet has been dropping to near 0MBS for the past week. I checked the logs and see the following the below DOS attacks which continue to repeat over and over. I tried calling my provider (Comcast) and they basically said there was nothing they could do. I looked up the source IP (in Thailand) and emailed their abuse email, but seriously doubt that will have any impact. My Norton Antivirus is up to date. The only suggestion from Comcast was to return this modem and purchase one that will let me block specific INCOMING IP addresses. Does Netgear offer that - as I can't find it on this model (AC1900-C6900). Anyone have any other suggestions? [DoS attack: Ping Of Death] from 1.0.213.112, port 0 2 Sun Mar 11 18:10:02 2018 172.97.162.168:0 1.0.213.112:0 [DoS attack: Teardrop or derivative] from 1.0.213.112, port 0 1 Sun Mar 11 18:09:50 2018 172.97.162.168:0 1.0.213.112:0 [DoS attack: Ping Of Death] from 1.0.213.112, port 0 3 Sun Mar 11 18:08:16 2018 25.54.225.1:0 1.0.213.112:0 [DoS attack: Teardrop or derivative] from 1.0.213.112, port 0 1 Sun Mar 11 18:02:49 2018 116.150.69.226:0 1.0.213.112:0 [DoS attack: Ping Of Death] from 1.0.213.112, port 0 2 Sun Mar 11 18:02:46 2018 116.150.69.226:0 1.0.213.112:0Ping Of Death
I have had issues with inertent for several months now. Obviously Spectrum has for the most part has always stated it was something with us. Just for starters I have the following certified. Power to the house, power inside the house, all cables within the house. We have bypassed the house sevral times as Spectrum has as well. Several different brands of routers and modems have been in place both by Spectrum and by us. We have also reformated our computers and mobil devices. I have started to review the logs and pings to our house. I have noticed several ping of death hits as well as a few other suspicious items. I have uploaded a couple of photos please excuse the qualtiy. Any help/advice would be greatly appreciated......DoS Attacks in the logs
Hey guys I have been getting disconnected from the internet at different times over the past week. At first i thought it might have been an ISP issue, spoke to them and multiple line checks revealed no issues....during the drop outs i wasnt able to ping the router (Nighthawk D7000) or any devices on my home network, i have checked the logs and it contained multiple DoS attack entries as below DoS attack: ACK Scan] from source: 51.254.7.95:80 Sunday, March 05,2017 08:43:45 [DoS attack: ACK Scan] from source: 51.254.7.95:80 Sunday, March 05,2017 08:42:30 [DoS attack: ACK Scan] from source: 51.254.7.95:80 Sunday, March 05,2017 08:41:14 [DoS attack: ACK Scan] from source: 51.254.7.95:80 Sunday, March 05,2017 08:39:59 I went ahead and disabled remote management and turned off upnp etc....propblem still persisted. I have changed the router to a new one (same model) and Dos attacks continued. With our ISP i get a new public IP address everytime i restart my router so there is really mo chance of this being a Real DoS attack as my IP changed on a daily basis (atleast over the past week) Done a scan on all the home laptops for any malware nothing!! I am stuck and not sure what to do? Is this a fault with the firmware / netgear equipments? Any help is greatly appreciated Cheers
