Forum Discussion

Kurt_H's avatar
Kurt_H
New Contributor
5 years ago

Internet speed issue cause by a Denial of Service Attack

Has anyone else looked at their router logs recently to find DoS attacks?

Here is just a 30 minute window that took Gigablast down to about 20mbps. Only way I got around it was to factory reset my router and reconfigure it because a reboot didn't do anything.

[DoS Attack: SYN/ACK Scan] from source: 89.187.177.185, port 8443, Saturday, July 18, 2020 15:05:44

[DoS Attack: SYN/ACK Scan] from source: 185.193.127.213, port 22, Saturday, July 18, 2020 14:14:58

 [DoS Attack: SYN/ACK Scan] from source: 51.79.142.79, port 50002, Saturday, July 18, 2020 14:04:10

[DoS Attack: SYN/ACK Scan] from source: 51.79.142.79, port 50002, Saturday, July 18, 2020 14:04:10

 [DoS Attack: SYN/ACK Scan] from source: 51.79.142.79, port 50002, Saturday, July 18, 2020 14:04:10

 [DoS Attack: SYN/ACK Scan] from source: 51.79.142.79, port 50002, Saturday, July 18, 2020 14:04:10

 [DoS Attack: SYN/ACK Scan] from source: 51.79.142.79, port 50002, Saturday, July 18, 2020 14:04:10

 [DoS Attack: SYN/ACK Scan] from source: 51.79.142.79, port 50002, Saturday, July 18, 2020 14:04:10

 [DoS Attack: RST Scan] from source: 83.169.5.177, port 3306, Saturday, July 18, 2020 13:57:30

[DoS Attack: SYN/ACK Scan] from source: 46.174.48.33, port 25568, Saturday, July 18, 2020 13:53:06

[DoS Attack: SYN/ACK Scan] from source: 51.79.142.79, port 50002, Saturday, July 18, 2020 13:45:20

[DoS Attack: SYN/ACK Scan] from source: 51.79.142.79, port 50002, Saturday, July 18, 2020 13:45:20

 [DoS Attack: SYN/ACK Scan] from source: 51.79.142.79, port 50002, Saturday, July 18, 2020 13:45:20

[DoS Attack: SYN/ACK Scan] from source: 51.79.142.79, port 50002, Saturday, July 18, 2020 13:45:20

 [DoS Attack: SYN/ACK Scan] from source: 51.79.142.79, port 50002, Saturday, July 18, 2020 13:45:20

 [DoS Attack: SYN/ACK Scan] from source: 51.79.142.79, port 50002, Saturday, July 18, 2020 13:45:20

  • ChrisL's avatar
    ChrisL
    Former Moderator
    5 years ago
    My guess would be that you have a Netgear router. Visiting https://bit.ly/2CM4Az9 may be useful in terms of putting those messages into better context.

    -Chris