DDOS

[Micbot]

is their anyway that i can stop ddos attacks? been getting flooded 

[Netduma Jack]

9 hours ago, Micbot said:

is their anyway that i can stop ddos attacks? been getting flooded 

Hi, welcome to the forum! The best way is through a VPN - we're working on a new Hybrid VPN feature to better support this capability.

How are you seeing these DDoS attacks? It's far more common to mistake network issues with DDoS attacks - those kinds of attacks are more rare than you'd think, and tend to target only large streamers and content creators.

[Guest Killhippie]

Netgear routers always tend to point to any probing of ports as DDoS as Jack has said, its very rare for an individual to be targeted. The firewall is just reporting port probes some legitimate some not and getting a bit paranoid, but if you see them in the logs its doing its job, no need to worry and you are not under attack. Routers are exposed to hundreds of port probes every day, just ignore the messages they are not important, unless you get knocked off line which once again is highly unlikely.

[Netduma Admin]

If you're just seeing the 'DoS Attacks' in your log then don't worry about this. As KillHippie said, this is effectively Internet white noise. If you Google the log entry you will see plenty of threads on the NETGEAR forums confirming that this is nothing to worry about.

[Micbot]

Yeah im seeing dos attacks in my log but my cpu usage in system information is always at 100% even at low network usage times, I don't think that's normal which leads me to believe that i'm being flooded with unwanted traffic  

[Netduma Fraser]

I don't think that what is happening. If you were you'd barely be able to load a website, can you use the internet fine?

[Micbot]

Yes I’m able to use the internet just fine. So if that not the case then do you have any thoughts on why the router cpu stays at 100% even at low network usage?

[Netduma Fraser]

Do you have a lot of panels pinned to the dashboard?

[Micbot]

Not too many just the geo filter map, cpu usage, and network snapshot

[Netduma Fraser]

As it's old hardware if you have a lot of devices connected that might be it but I wouldn't be too worried about the CPU

[Micbot]

I do have a complex network setup with multiple routers and the xr500 has the wan ip so that could be the case but its usually around 60-70% usage, but i do want to get a faster cpu so i have more processing power for all of my devices. I was thinking about getting the xr700 but I dont know where i could sell my xr500 do you know anywhere i could do that?

[Netduma Fraser]

No idea, but don't post it for sale here as we'll remove your post as its a support site not a marketplace

[Micbot]

ok thanks for the help

[Guest Killhippie]

10 hours ago, Netduma Fraser said:

As it's old hardware if you have a lot of devices connected that might be it but I wouldn't be too worried about the CPU

So the XR500 is old hardware now?

[Netduma Admin]

No way is the XR500 old hardware! It’s a beast. I think Fraser got confused and thought he was handling an R1 query - that subforum is very busy with the DumaOS open Beta at the moment. 

@Micbot - could you post a screenshot of your CPU graph the next time it’s high please?

[Micbot]

Here a screenshot when the network activity is low

[Netduma Jack]

13 minutes ago, Micbot said:

Here a screenshot when the network activity is low

That's strange, is there something using lots of data all the time? How many devices do you have? If you have DumaOS open multiple times that can also use loads of CPU. Anything out of the ordinary which could be using lots of CPU?

[Micbot]

I don’t believe it’s a device that is using a lot of data all the time but I do have two routers that are in access point mode that can allow 15+ devices to connect because I have a large home and also my gaming pc and Xbox but I don’t think it’s using that much data. I only open DumaOS in one tab.

[Guest Killhippie]

6 hours ago, Netduma Jack said:

That's strange, is there something using lots of data all the time? How many devices do you have? If you have DumaOS open multiple times that can also use loads of CPU. Anything out of the ordinary which could be using lots of CPU?

I think the graph is corrupt it can’t be flatly using that much cpu it’s almost like 90% should be around 0. I would empty the browser cache see how that goes try resizing the cpu window and if all else fails factory reset the router.   If you are being attacked you would see so many peaks and troughs in fact that’s what you normally see when there’s lots of networking activity not a flat line. 

[Netduma Admin]

This is unusual - could you try rebooting the router as the current uptime has been over 8 days and a lot of traffic has gone through the router. This is a very rare case, but it's possible that something has become saturated. Let us know how it performs after a reset.

If it's still high, could you hard refresh your browser (CTRL +F5). The graph might be incorrect.

[Micbot]

This is how it looks after the reset. I guess it was how long the current uptime was or graphical error. I should of tried a reset from the start instead of thinking of a dos attack.

[Netduma Admin]

Good result. Glad that's sorted.