IDNetters Forums

Technical News & Discussion => Networking & Routers => Topic started by: Aradin on Nov 27, 2011, 20:16:44

Title: DOS Attack to router from me?
Post by: Aradin on Nov 27, 2011, 20:16:44
Tried searching for something like this for ages and haven't really found anything (That is, whether this is normal or whether I can fix it). I'm just wondering if there's something malicious on my PC that scans aren't detecting?

Anyway, I've been getting something like this everyday (Times have varied slightly) for some time now. At the stated time I lose all network connectivity for 20 seconds or so then I reconnect and I'm good to go till the same time the next day. Only ever happens with my PC and connection which makes me think there is something somewhere. Router is a Netgear DG834Gv5 with firmware V1.6.01.34. Using Ethernet with TP-Link Powerline adapters.

[DOS Attack] : 1 [STORM] packets detected in last 20 seconds, source ip [192.168.0.137]
Saturday, Nov 26,2011 19:49:11


Is anyone able to shed any light on the matter?
Title: Re: DOS Attack to router from me?
Post by: Steve on Nov 27, 2011, 20:34:02
The source is an internal IP address , I just wonder if your dropping connection and the error is a miss report from the router when a packet from that machine doesn't get through because the connection is down. :dunno:
Title: Re: DOS Attack to router from me?
Post by: Aradin on Nov 27, 2011, 21:05:33
Yeah that's my LAN IP. What would cause only me to drop connection at the same time (Give or take) everyday? My understanding of it is something from my PC is sending too many packets and flooding the router, dropping my connection.

I mean it could be nothing as but all the scans I've done return nothing and it is rather annoying waiting for it to happen.
Title: Re: DOS Attack to router from me?
Post by: Glenn on Nov 27, 2011, 21:12:27
Is it the same time each day, is there anything switching in the house at that time?
Title: Re: DOS Attack to router from me?
Post by: Aradin on Nov 28, 2011, 03:05:38
Same time and nothing I can think of that is turned on. Why would something like that only affect my connection and no one elses (2 computers and a console)?
Title: Re: DOS Attack to router from me?
Post by: Baz on Nov 28, 2011, 15:49:14
does it not show in the router set up what device that address is allocated to.


I have my printer set up to use the same address all the time, could it be some thing similar  :dunno:
Title: Re: DOS Attack to router from me?
Post by: Aradin on Nov 28, 2011, 17:25:36
As I said, I allocated that address to my PC (Each device has it's own set address).

I just don't understand what is happening. What makes me think it's something on my PC is that it only happens to me. Apart from this entry in the log everyday, it's clear.
Title: Re: DOS Attack to router from me?
Post by: Rik on Nov 28, 2011, 17:31:35
Have you run a virus and malware scan?
Title: Re: DOS Attack to router from me?
Post by: Glenn on Nov 28, 2011, 17:43:07
http://forums.dropbox.com/topic.php?id=22766
http://www.dslreports.com/forum/r24047561-Netgear-log-DOS-attack-FIN-Scan-and-DOS-attack-STORM-
any use?
Title: Re: DOS Attack to router from me?
Post by: Aradin on Nov 28, 2011, 20:32:56
I've disabled that LAN sync so I'll see if it was that tomorrow (Today's disconnect has already happened). I don't keep Dropbox open however so we'll see if it can sync without being open.

And yes, run several scans and none have found anything.