DOS Attack Help

frag06

Honorable
Mar 17, 2013
1,353
0
11,960
Recently I have been having issues with my internet and TV. During and after streaming videos of any kind from any site (e.g. Youtube, Vimeo), my internet seriously slows down and even stops working sometimes. It has also been knocking out my TV in a few minute spans (i.e. TV goes out for a few minutes, comes back and then goes out a few minutes later).

When I do a speed test I get very slow speeds, usually 2 - 3 Mbps and I have a 45 Mbps connection. Even worse is I get 150 ms ping; I normally get around 45 ms ping. During these times I can't access my Modem, the connection just times out. The problem usually resolves itself 10 to 20 minutes after I am done streaming.

So today I checked my router logs and I found DOS attack reports. I'm not sure what these mean or if they are relevant to my problem, but I need help here!


[DoS attack: FIN Scan] attack packets in last 20 sec from ip [74.125.xx.xxx], Friday, May 09,2014 10:23:22
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [74.125.xxx.xxx, Friday, May 09,2014 10:18:41
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [74.125.xxx.xxx], Friday, May 09,2014 10:18:12
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [74.125.xxx.xxx], Friday, May 09,2014 10:16:41
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [74.125.xx.xxx], Friday, May 09,2014 10:16:03

There are many more. I have read that this seems to be a problem with Netgear routers, but I'm not sure what they mean. I substituted an x for the last few digits, but they are all from the same two IP's.

Any help is appreciated!

Thank you.
 


My router firmware is up-to-date. As for as the Modem goes, AT&T handles that.

I am thinking about contacting them, but they haven't been helpful in the past. I usually just get the run-around. Tech comes out and there is no problem. Hours or a day later, the problem is back and I have to spend another hour on the phone trying to explain it to someone who doesn't seem to have any idea what they're doing. It's a vicious, time consuming circle.

Thank you for the help, though!

 
You could try rebooting your router to see if your IP address changed, or leaving it unplugged for several hours to see if you are issued a new IP address. If neither of those options worked you could call your ISP and have them release the IP address. If somebody is designating a denial of service attack on you they would need your IP address which means changing it would stop them unless they come into contact with you again online in ways such as skype calls or gaming. To prevent them in the future it is possible to use a VPN. This is all assuming you are truly under a DOS attack and that this isn't just your router malfunctioning.

In the event it is your router malfunctioning, you could try a firmware update as the above poster said, a hard reset, and if that doesn't work, contact netgear for support. Because you aren't doing any activities that involve connecting with somebody else over the internet during the times you experience these issues, it seems highly likely that it is your own router malfunctioning and not somebody actually attacking your network.

I think that spending some time in contact with your router manufacturer is in your best interest.
 

Latest posts