DoS Attacks

  • 2
  • Question
  • Updated 1 year ago
  • In Progress
I see a lot of DoS attacks that my router drops the data on. Your staff has confirmed they see a lot of triffic at the same time (1 am - 5 am), what I want to know am I being charged for this data and why are DoS attacks not being stopped and not propagated down to me?
Photo of downsm3

downsm3

  • 2 Posts
  • 0 Reply Likes

Posted 1 year ago

  • 2
Photo of Old Labs (VS1-329-L12FZ)

Old Labs (VS1-329-L12FZ)

  • 3893 Posts
  • 3972 Reply Likes
ISPs can only mitigate DoS attacks, complete prevention isn't really possibe since more sopisticated attacks can resemble legitimate traffic. I'm certain ViaSat has some mitigation in place - but anything that seems like it's legitimate and makes it's way to your router would likely count towards your data usage - I often wonder myself if these arent the source of excessive/phantom data usage.

Best you can do is ensure your own protection - go over to ShieldsUp! and see if they pick up any vulnerabilities (they offer suggestions for any found). 
(Edited)
Photo of James

James

  • 333 Posts
  • 51 Reply Likes
I believe you are most likely 100 percent correct on peoples useage being chewed up as a result of this, I have had this theory for awhile as well as possible excessive overhead useage. I have personally seen this data problem even with the Ethernet cable unplugged.
Photo of Old Labs (VS1-329-L12FZ)

Old Labs (VS1-329-L12FZ)

  • 3893 Posts
  • 3972 Reply Likes
First thing to do is interpret the router logs to determine if it's a DoS - without actual denial of service, it's not one and most consumer routers are simply warning of the potential. Lots of dropped packets at your router would be a cause for concern on usage and would yield excess usage (might be time for a new router in that case).  Use a router with good traffic monitoring and analysis to verify/validate usage which is the more likely case.

I'm skeptical, only because the bad guys typically don't target home users for DoS - possible? Sure, anything's possible with today's IoT - another reason for a solid, reliable router - the extra cost is well worth it if you can move into the $200+ range.
(Edited)
Photo of downsm3

downsm3

  • 2 Posts
  • 0 Reply Likes
Might agree if my basic netgear wasn't dropping the traffic by default. Annoys me that I would have this counted towards my data usage, especially since it only appears to be happen during overnight hours.
Photo of Old Labs (VS1-329-L12FZ)

Old Labs (VS1-329-L12FZ)

  • 3890 Posts
  • 3968 Reply Likes
Tough to say without seeing the log entries, type, source, etc. but Netgear did have a lot of false positives at one time - don't know if that's still true - probably long since corrected by firmware - I suppose if I were a hacker I'd limt my activities to the wee hours, but I'm not.

P.S. Did you make it through to tier 2 or tier 3 support - sounds like a tier 1 answwer you were given     
(Edited)
Photo of Diana

Diana, Viasat Employee

  • 2243 Posts
  • 424 Reply Likes
Hello downsm3, Please send an email to exedelistens@viasat.com with your account information and we will escalate your issue.