DOS Attacks Causing Slow Internet?

HuckleberryWill · 9 Jul 2013 at 15:50

Since sunday, my internet has been kinda strange... Things would load fast, like usual, then suddenly the internet would barely work, then go back to normal.

I checked the router logs, and saw this -

Code:

[DoS attack: FIN Scan] attack packets in last 20 sec from ip [89.207.18.129], Tuesday, Jul 09,2013 14:44:30
[DoS attack: ACK Scan] attack packets in last 20 sec from ip [77.67.56.178], Tuesday, Jul 09,2013 14:43:14
[DoS attack: ACK Scan] attack packets in last 20 sec from ip [77.67.60.130], Tuesday, Jul 09,2013 14:43:06
[DoS attack: ACK Scan] attack packets in last 20 sec from ip [77.67.56.162], Tuesday, Jul 09,2013 14:43:06
[DoS attack: ACK Scan] attack packets in last 20 sec from ip [79.141.161.11], Tuesday, Jul 09,2013 14:43:06
[DoS attack: ACK Scan] attack packets in last 20 sec from ip [212.187.192.162], Tuesday, Jul 09,2013 14:43:06
[DoS attack: ACK Scan] attack packets in last 20 sec from ip [77.67.60.42], Tuesday, Jul 09,2013 14:43:06
[DoS attack: ACK Scan] attack packets in last 20 sec from ip [77.67.56.178], Tuesday, Jul 09,2013 14:43:06

This has been happening on and off quite a lot in the past few days, and is almost unbearable.

Any way to solve it?

It also causes things like skype to dip in and out, and downloads to stop...

I am almost certain that this is the cause, as a dip/freeze in connection, or website not loading, coincides with these messages in the log.

bremen1874 · 9 Jul 2013 at 16:34

If you're on a dynamic IP try to get a new one.

How easy this would be will depend on your ISP. It could be a simple as dropping the connection and waiting a few minutes before reconnecting.

Have you any reason to suppose that you'd be individually targeted?

HuckleberryWill · 9 Jul 2013 at 16:39

bremen1874 said:
If you're on a dynamic IP try to get a new one.

How easy this would be will depend on your ISP. It could be a simple as dropping the connection and waiting a few minutes before reconnecting.

Have you any reason to suppose that you'd be individually targeted?

I am on a dynamic IP, tried un-plugging the modem for 10 minutes, thought that didn't work. Will call the ISP later.

Don't think so, though I do run a website, doubt that's much to do with it... (Its nothing very big).

On Holiday · 9 Jul 2013 at 16:44

HuckleberryWill · 9 Jul 2013 at 16:48

YarwoodUK said:
Netgear router? I wouldn't necessarily trust it when it says "DoS Attacks".. Mine reports them, for example, when I browse server-lists or torrent.

Yup. Originally I wasn't going to trust it, though now that the connection has gone rubbish every time that message shows.

Hmm. I am downloading a game... Though my parents said that the internet was strange while I was at school too...

EDIT - Also, git is having trouble cloning something now...

HuckleberryWill · 9 Jul 2013 at 16:54

YarwoodUK said:
In your control panel, go to WAN Setup and tick "Disable Port Scan and DoS Protection"

Ok... I will try that...

KIA · 9 Jul 2013 at 17:07

It's probably a coincidence. Consumer router attack logs are useless and misleading.

HuckleberryWill · 9 Jul 2013 at 17:46

Seemed to solve the problem, then it came right back.

HuckleberryWill · 11 Jul 2013 at 15:55

Still not fixed, anyone?

KIA · 11 Jul 2013 at 20:01

Change DNS servers
Change router
Apply latest router firmware and reset to factory defaults
Post line stats