NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
dos attack by ISP?
Hello, I have been having trouble with my nighthawk. Today I had cox come out to fix an issues to me losing internet random for about 20 seconds. The guy took off a filter that is inbetween the modem and cable. Since the internet has not lost service for about 6 hours. Then around 20 mins ago i lost service once again. So i go to my router log and see this: [DoS attack: ACK Scan] attack packets in last 20 sec from ip [72.195.165.88], Tuesday, Nov 08,2016 17:31:33 [DHCP IP: (192.168.1.6)] to MAC address 00:25:F0:A9:3F:F1, Tuesday, Nov 08,2016 17:29:53 [DoS attack: ACK Scan] attack packets in last 20 sec from ip [72.195.165.144], Tuesday, Nov 08,2016 17:29:46 [DoS attack: FIN Scan] attack packets in last 20 sec from ip [72.195.165.144], Tuesday, Nov 08,2016 17:29:41 Now i understand that these are not REAL Dos attacks, but I googled the IP and it was IPs from Cox Communications. So i called cox to confirm that I just lost internet and they told me the internet has been stable for 8 hours and see no indication of a disconnect. I have the latest firmware on my R7000: V1.0.7.2_1.1.93 and also have gone to factory defaults multiple times. I have search all around the internet to figure out this problem and have not come up with a solution. My internet connection speed is: as i was running speed test my internet dropped out for another 20 seconds log shows this: [Admin login] from source 192.168.1.2, Tuesday, Nov 08,2016 23:03:27 [DoS attack: FIN Scan] attack packets in last 20 sec from ip [52.89.158.114], Tuesday, Nov 08,2016 22:54:32 [DoS attack: ACK Scan] attack packets in last 20 sec from ip [52.89.158.114], Tuesday, Nov 08,2016 22:54:27 [DoS attack: FIN Scan] attack packets in last 20 sec from ip [151.101.24.175], Tuesday, Nov 08,2016 22:44:29 [DHCP IP: (192.168.1.7)] to MAC address E4:98:D6:71:16:DA, Tuesday, Nov 08,2016 22:37:58 Any help on this will be greatly appricated i have been battling this for months now. Let me know if any other information is needed.iPhone 6S Sends DoS to NetGear
I found evidence that my iPhone 6S is the cause of the DoS attacks on my NetGear C3000-100NAS. The iPhone connects and then instead of a local 192.168.0.x address, it gets a strange WAN address and the attacks like the ones below begin immediately: [DoS attack: Ping Of Death] from 7.4.241.224, port 0 1 Sat Oct 01 20:35:21 2016 221.135.76.83:0 7.4.241.224:0 [DoS attack: Teardrop or derivative] from 7.4.241.224, port 0 1 Sat Oct 01 20:35:21 2016 221.135.76.83:0 7.4.241.224:0 [DoS attack: Ping Of Death] from 7.4.241.224, port 0 1 Sat Oct 01 20:35:21 2016 221.135.76.83:0 7.4.241.224:0 I've been able to minimize the impact of this by taking these steps: Log into the Netgear admin before turning on wifi on the iPhone Monitor the iPhone as it connects to the Netgear. If it picks up a WAN address, immediately turn off wifi on the iPhone. If it picks up a local address, it's OK. This is not a long term fix. The following attempts have not worked: There's no firmware update for the iPhone to date There's no firmware update to the Netgear to date Factory resetting the iPhone was a 100% waste of time in this case Giving the iPhone a reserved IP address on the Netgear was a 100% waste of time Reporting it to ComCast was an absolute complete 100% waste of LOTS OF TIME We have to group think this one, folks, so contribute. Thanks.DoS Attack
DoS attacks and ping of death... I can't get rid of it rebooted, changed passwords etc. This random ip address jumps from device to device in my apartment. (Iphones) 147.13.253.0 it's so frustrating. Thanks in an advance Oh and my ISP was not helpful at all. You can't block an ip address?! And it's never "their" problem.
