Review Ticket History – Case #29553818
Summary:
C7000 - DDOS and remote access
Status:
Open
Communication History:
Online Comment
1/9/2018 2:15 PM
I have tons of warnings in my log for remote atttacks. I would also like to know how to disable ipv6. My wifi works great sometimes but has some really horrible moments too. Wondering if the 2 problems are related?
NETGEAR Support
1/10/2018 12:00 AM
Case ID:29553818
Dear Christopher,
Thank you for choosing NETGEAR. My name is Rama(Expert ID:1591), and I am your support expert for today.
Are you facing Internet disconnection via wifi?
If yes, please help us with few information's:
1. Does the wired connection is working fine with out any issue?
2. Are you facing this issue connecting to 2.4ghz or 5ghz?
3. Do you see any changes in the light status when the connection disconnects?
4. How often do you face this issue?
5. Kindly attach the screen shot of the logs:
>>To attach a file on your email query, please refer to the steps below:
1) Log into the my.netgear.com Portal.
2) Click the "Attach Files to Support Case" option located in left side Menu.
3) Select from Drop down "My Open Cases" the Case# to which you would to attach the file.
4) Click "Select" button and select the file and it will be uploaded.
File accepted are PDF, JPG, GIF, PNG, DOC, ZIP. Maximum Size allowed is 30MB.
6. Does your service provider provides IPV6 connection?
7. What's the IPv4 address you receive connecting to the modem?
8. Please open up a browser from your device which is connected to the router and type it as www.routerlogin.net or 192.168.0.1
Enter the username as admin and password as password if it's prompting.
Click on Advanced tab>>Advanced setup>>IPV6 and attach the screen shot of that page.
Please let us know the results of the these steps so that I can determine the next action.
It was a pleasure assisting you. Thank you for choosing NETGEAR. Have a great day!
Regards,
Rama
Expert ID:1591
NETGEAR support.
Online Comment
1/10/2018 2:45 PM
Wired clients don't notice the slowness as much, but it is prevalent
Both 2.4 and 5
All lights were on the modem
It happens sporadically all the time
NETGEAR Support
1/10/2018 6:38 PM
Dear Christopher,
Thank you for choosing NETGEAR. My name is Mercy (Expert ID:1825), and I am your support Expert today.
Thank you for the prompt response
Christopher, in order to isolate the issue, please let me know the following details:
1.Kindly login to www.routerlogin.net
2.Then Click on Advanced> Setup> Wireless Setup.
3.Under Wireless Setup change the channels to 1 or 11 for 2.4Ghz and 153 for 5Ghz and hit apply.
4.Kindly monitor the status and let us know the result.
I am looking forward for your response.
Please do visit http://support.netgear.com for any technical queries regarding NETGEAR products.
A notice will automatically be sent to your email address when I respond to your inquiry. Please DO NOT REPLY to that email. Instead, to add additional information to your case, click No to the question "Was your problem resolved with the information provided by the NETGEAR representative above?"
If you click YES, your case will be closed and a separate email containing a survey link will be sent so you can share with us your customer support experience. Please rate the support and service I provided you.
Thanks again for choosing NETGEAR. Have a great day!
Regards,
Mercy
NETGEAR Support
Online Comment
1/10/2018 6:51 PM
Those are the currently the channels i am using
What about the malicious events in the log?
How do i turn off ipv6 to clients?
NETGEAR Support
1/11/2018 12:41 AM
Dear Christopher,
Thank you for choosing NETGEAR. My name is Mercy (Expert ID:1825), and I am your support Expert today.
Thank you for the prompt response.
1.If you play any multiplayer games, there would be times you will get a inbound request from other networks. At times they will be denied for security reasons. which will show as DOS attacks.
2.If you are having issue with games being intermittent, we might do a port forwarding for the required ports for the games
I am looking forward for your response.
Please do visit http://support.netgear.com for any technical queries regarding NETGEAR products.
A notice will automatically be sent to your email address when I respond to your inquiry. Please DO NOT REPLY to that email. Instead, to add additional information to your case, click No to the question "Was your problem resolved with the information provided by the NETGEAR representative above?"
If you click YES, your case will be closed and a separate email containing a survey link will be sent so you can share with us your customer support experience. Please rate the support and service I provided you.
Thanks again for choosing NETGEAR. Have a great day!
Regards,
Mercy
NETGEAR Support
Online Comment
1/11/2018 3:13 AM
So far I'm not very happy with your level of support and total disregard for answering questions. I answered all of your initial questions and uploaded everything asked of me. Can't you do the same? This is the last time I contact your support channel, the next correspondence will be Netgear on full blast on both Amazon and your forums to display the incompetence and lack of understanding
1. Why doesn't my log say blocked for all the port scans, lan access, ddos, etc. How do I know if they are being blocked or not?
2. For the 3rd time, how can i either disable ipv6 for clients or turn on dhcp and set the number of addresses to 1?
3. I also get this strange entry in the connected devices that coincides with a log entry. Why does Matt-iPhone have an IP of 89.130.179.0 when I know it is 192.168.0.17 and a lan access attempt from Alabama?
Connected device entry:
SSID Status IP Address MAC Address Device Name
BetterThanYours Allowed 89.130.179.0
2600:8800:5982:b300:f132:39d7:d3a:ea33 94:E9:6A:BC:B2:E8 Matt-iPhone
Log entry:
[LAN access from remote] from 108.95.70.124:3075 to 192.168.0.17:3075 1 Wed Jan 10 16:43:06 2018 192.168.0.17:3075 108.95.70.124:3075
NETGEAR Support
1/11/2018 2:04 PM
case:29553818
Dear Christopher,
Thank you for choosing NETGEAR. My name is Vijay (Expert ID:1691) and I am your support Expert today.
I really apologize for the Inconvenience happen to you, I do understand that you are facing DDOs attack on your modem. I will do my best to Isolate the issue.
Please help me with the following Information.
1,Make sure the Remote management option is not enabled on the modem, If enabled please disable it and check?
2, Please uncheck respond to ping to the Internet port option ?
3.Please uncheck Dynamic Dns, If it is enabled ?
Looking forward for you response.
It was a pleasure assisting you. Thank you for choosing NETGEAR. Have a great day!
Sincerely,
Vijay,
NETGEAR support
Online Comment
1/12/2018 3:54 PM
remote management is disabled
everything is unchecked in the "wan setup" tab. ie ping, firewall, dmz, port scan, and sip.
dynamic dns is disabled
Summary:
C7000 - DDOS and remote access
Status:
Open
Communication History:
Online Comment
1/9/2018 2:15 PM
I have tons of warnings in my log for remote atttacks. I would also like to know how to disable ipv6. My wifi works great sometimes but has some really horrible moments too. Wondering if the 2 problems are related?
NETGEAR Support
1/10/2018 12:00 AM
Case ID:29553818
Dear Christopher,
Thank you for choosing NETGEAR. My name is Rama(Expert ID:1591), and I am your support expert for today.
Are you facing Internet disconnection via wifi?
If yes, please help us with few information's:
1. Does the wired connection is working fine with out any issue?
2. Are you facing this issue connecting to 2.4ghz or 5ghz?
3. Do you see any changes in the light status when the connection disconnects?
4. How often do you face this issue?
5. Kindly attach the screen shot of the logs:
>>To attach a file on your email query, please refer to the steps below:
1) Log into the my.netgear.com Portal.
2) Click the "Attach Files to Support Case" option located in left side Menu.
3) Select from Drop down "My Open Cases" the Case# to which you would to attach the file.
4) Click "Select" button and select the file and it will be uploaded.
File accepted are PDF, JPG, GIF, PNG, DOC, ZIP. Maximum Size allowed is 30MB.
6. Does your service provider provides IPV6 connection?
7. What's the IPv4 address you receive connecting to the modem?
8. Please open up a browser from your device which is connected to the router and type it as www.routerlogin.net or 192.168.0.1
Enter the username as admin and password as password if it's prompting.
Click on Advanced tab>>Advanced setup>>IPV6 and attach the screen shot of that page.
Please let us know the results of the these steps so that I can determine the next action.
It was a pleasure assisting you. Thank you for choosing NETGEAR. Have a great day!
Regards,
Rama
Expert ID:1591
NETGEAR support.
Online Comment
1/10/2018 2:45 PM
Wired clients don't notice the slowness as much, but it is prevalent
Both 2.4 and 5
All lights were on the modem
It happens sporadically all the time
NETGEAR Support
1/10/2018 6:38 PM
Dear Christopher,
Thank you for choosing NETGEAR. My name is Mercy (Expert ID:1825), and I am your support Expert today.
Thank you for the prompt response
Christopher, in order to isolate the issue, please let me know the following details:
1.Kindly login to www.routerlogin.net
2.Then Click on Advanced> Setup> Wireless Setup.
3.Under Wireless Setup change the channels to 1 or 11 for 2.4Ghz and 153 for 5Ghz and hit apply.
4.Kindly monitor the status and let us know the result.
I am looking forward for your response.
Please do visit http://support.netgear.com for any technical queries regarding NETGEAR products.
A notice will automatically be sent to your email address when I respond to your inquiry. Please DO NOT REPLY to that email. Instead, to add additional information to your case, click No to the question "Was your problem resolved with the information provided by the NETGEAR representative above?"
If you click YES, your case will be closed and a separate email containing a survey link will be sent so you can share with us your customer support experience. Please rate the support and service I provided you.
Thanks again for choosing NETGEAR. Have a great day!
Regards,
Mercy
NETGEAR Support
Online Comment
1/10/2018 6:51 PM
Those are the currently the channels i am using
What about the malicious events in the log?
How do i turn off ipv6 to clients?
NETGEAR Support
1/11/2018 12:41 AM
Dear Christopher,
Thank you for choosing NETGEAR. My name is Mercy (Expert ID:1825), and I am your support Expert today.
Thank you for the prompt response.
1.If you play any multiplayer games, there would be times you will get a inbound request from other networks. At times they will be denied for security reasons. which will show as DOS attacks.
2.If you are having issue with games being intermittent, we might do a port forwarding for the required ports for the games
I am looking forward for your response.
Please do visit http://support.netgear.com for any technical queries regarding NETGEAR products.
A notice will automatically be sent to your email address when I respond to your inquiry. Please DO NOT REPLY to that email. Instead, to add additional information to your case, click No to the question "Was your problem resolved with the information provided by the NETGEAR representative above?"
If you click YES, your case will be closed and a separate email containing a survey link will be sent so you can share with us your customer support experience. Please rate the support and service I provided you.
Thanks again for choosing NETGEAR. Have a great day!
Regards,
Mercy
NETGEAR Support
Online Comment
1/11/2018 3:13 AM
So far I'm not very happy with your level of support and total disregard for answering questions. I answered all of your initial questions and uploaded everything asked of me. Can't you do the same? This is the last time I contact your support channel, the next correspondence will be Netgear on full blast on both Amazon and your forums to display the incompetence and lack of understanding
1. Why doesn't my log say blocked for all the port scans, lan access, ddos, etc. How do I know if they are being blocked or not?
2. For the 3rd time, how can i either disable ipv6 for clients or turn on dhcp and set the number of addresses to 1?
3. I also get this strange entry in the connected devices that coincides with a log entry. Why does Matt-iPhone have an IP of 89.130.179.0 when I know it is 192.168.0.17 and a lan access attempt from Alabama?
Connected device entry:
SSID Status IP Address MAC Address Device Name
BetterThanYours Allowed 89.130.179.0
2600:8800:5982:b300:f132:39d7:d3a:ea33 94:E9:6A:BC:B2:E8 Matt-iPhone
Log entry:
[LAN access from remote] from 108.95.70.124:3075 to 192.168.0.17:3075 1 Wed Jan 10 16:43:06 2018 192.168.0.17:3075 108.95.70.124:3075
NETGEAR Support
1/11/2018 2:04 PM
case:29553818
Dear Christopher,
Thank you for choosing NETGEAR. My name is Vijay (Expert ID:1691) and I am your support Expert today.
I really apologize for the Inconvenience happen to you, I do understand that you are facing DDOs attack on your modem. I will do my best to Isolate the issue.
Please help me with the following Information.
1,Make sure the Remote management option is not enabled on the modem, If enabled please disable it and check?
2, Please uncheck respond to ping to the Internet port option ?
3.Please uncheck Dynamic Dns, If it is enabled ?
Looking forward for you response.
It was a pleasure assisting you. Thank you for choosing NETGEAR. Have a great day!
Sincerely,
Vijay,
NETGEAR support
Online Comment
1/12/2018 3:54 PM
remote management is disabled
everything is unchecked in the "wan setup" tab. ie ping, firewall, dmz, port scan, and sip.
dynamic dns is disabled