Skip to main content
AT&T Community Forums
Announcements
Get to the head of the class with our Back to School deals!
E

New Member

 • 

9 Messages

Fri, May 29, 2020 1:39 AM

other DOS attack

I'm not 100% if this is right place to post, I'm not sure what topic this should be, new to the forums. But I have ATT U-Verse, I have been having "other DOS attacks" for few days now. When I go to diagnostics tab and click the logs tab, that is what comes up along with generic discards, invalid IP packets, echo requests, It's not constant but it continues throughout the day, slowing internet. I've talked to technical support, I was told new modem would fix this issue. Of course it did not fix the issue, everything is the same, since I have a dynamic IP. So I called ATT support, the tech I talked to really didn't know anything, or the(his)support he was talking to either. They didn't even know what a dos or ddos was. So after a miserable couple hours of the tech's phone continuing to cut out and him having no idea what was going on, they said only thing they knew might work was calling retention number and canceling my account and opening a new one. Is this really the only way to fix this issue, and will it even fix the issue? I been searching online for solution but no one has solution for U-Verse or says contact your ISP, but what on earth do you do if you ISP can't even help you? Sorry for the long post any help would be appreciated.

Responses

Brand User
ATTHelp

Community Support

 • 

125K Messages

a month ago

We're here to help, @eagleone4 with your internet connection.

Is this related to a business account?

Also. is your security software up to date? There could be a number of reasons this would happen. Learn more about DDOS attacks.

We would suggest changing the channel on your router to see if its a traffic overload that could be the cause of this. Please let us know if that works for you.

Charles, AT&T Community Specialist

Still need help? Ask a question! Our 1.4 million members typically respond within 1 hour.

*I am an AT&T employee, and the postings on this site are my own and don't necessarily represent AT&T's position, strategies or opinions.

New Member

 • 

9 Messages

No this isn't a business account, it's personal account. My guess it happened gaming on PS4 because there is no VPN on it. Everything is up to date. I've changed channels on router earlier to get best channel, that wouldn't solve the issue anyways, because DOS and DDOS are caused by people having your public IP address. It will probably continue until I can change the the IPV4 and IPV6 addresses. So I need to know how I go about that. Thank you.

Brand User
ATTHelp

Community Support

 • 

125K Messages

Hi @eagleone4, us understand your concerns, firewalls have built-in safeguards against DDoS attacks.

 

They can block heavy bursts of traffic and block traffic from known attackers.

 

Use official servers for online gaming. If you game online, it's best to stick with official servers, such as Steam, Playstation Network, or XBox Live. 

 

AT&T Internet customers can help protect themselves and their computers with the AT&T Internet Security Suite powered by McAfee®. This suite is free to qualified customers. It includes anti-virus, anti-spyware, and firewall protection

 

Hope this helps.

 

Lafayette, AT&T Community Specialist

Still need help? Ask a question! Our 1.4 million members typically respond within 1 hour.

*I am an AT&T employee, and the postings on this site are my own and don't necessarily represent AT&T's position, strategies or opinions.

New Member

 • 

9 Messages

I do use official servers for gaming, firewalls mean nothing when IP addresses are public. I look at my diagnostic logs and can see other DOS attacks. You also can't put a anti virus protection on a PlayStation 4. A VPN is only way to protect your IP, but they already know my IP, so it's pointless. You are missing the whole point. I want to change my IPV4 and IPV6 addresses how do I go about that? Do I have to cancel my account and start over?

Brand User
ATTHelp

Community Support

 • 

125K Messages

@eagleone4.

 

We wouldn't recommend canceling and starting over because there's no guarantee that your public IP address will be completely different, and it could cause it's own set of problems. There's no specific way to change your public IP address for residential customers. Are you hosting servers or just connecting to them? Did you open any ports or expose your public IP address by running your gateway in IP Passthrough without a router behind the gateway?

 

We look forward to your response!

 

Ramses, AT&T Community Specialist

Still need help? Ask a question! Our 1.4 million members typically respond within 1 hour.

*I am an AT&T employee, and the postings on this site are my own and don't necessarily represent AT&T's position, strategies or opinions.

New Member

 • 

9 Messages

No, I'm just connecting to official game server lobbies. I never change any of my settings, it's whatever the settings the modem picks on start up. I'm not entirely sure how people people can see IPs on a PS4, maybe a modded account, but it's starting to be a common thing when you search the internet. If there's no way to change my residential IP, then only thing I know to do is switch to a whole new service. I'm not going to get DOS attacked everyday I know that.

Brand User
ATTHelp

Community Support

 • 

125K Messages

@eagleone4.

 

As you suggested before, a VPN would be a good way to help prevent this in the future, and while we can't change your public IP address directly without using a static IP address, you can potentially change it by repeatedly factory resetting your gateway, though this may take several tries and the effect likely won't be permanent.

 

Let us know if this is something you'd like to try.

 

Ramses, AT&T Community Specialist

Still need help? Ask a question! Our 1.4 million members typically respond within 1 hour.

*I am an AT&T employee, and the postings on this site are my own and don't necessarily represent AT&T's position, strategies or opinions.

New Member

 • 

9 Messages

Already reset modem and even got a new one, resetting it never changes IPV4 or IPV6. I wrote down from old modem what my IPs and numbers were and checked them with the new modem they never changed or change. VPN would be good for future as there are ways to run a VPN on PS4 but that does nothing now, because they already have my IP. I'm just trying to get my peace of my mind back, instead of having someone dos attacking my internet connection.

(edited)

Brand User
ATTHelp

Community Support

 • 

125K Messages

Hey @eagleone4,

 

You will need to research outside prevention methods. 

 

More information on DoS attacks, and prevention methods. Attacks such as SYN flooding take advantage of bugs in the operating system. Installing security patches can help reduce the chances of such attacks. Intrusion detection systems can also be used to identify and even stop illegal activities Firewalls can be used to stop simple DoS attacks by blocking all traffic coming from an attacker by identifying his IP. Routers can be configured via the Access Control List to limit access to the network and drop suspected illegal traffic.

 

Try flushing your DNS as well. Run the command prompt and type these three commands: ipconfig /flushdns, ipconfig /release, ipconfig /renew.

 

Let us know if this information helps.

 

 

Max, AT&T Community Specialist

Still need help? Ask a question! Our 1.4 million members typically respond within 1 hour.

*I am an AT&T employee, and the postings on this site are my own and don't necessarily represent AT&T's position, strategies or opinions.

New Member

 • 

9 Messages

Since I'm a tech wizard, I'll get right on all those things, I'll just give it a few days if it doesn't quit I'll just switch to another service. Obviously I'm stuck with getting DOS attacked, until the lowlife decides to stop. Pretty sad your ISP can't block and monitor it. Not sure what you guys do for businesses just tell them well good luck.

(edited)

New Member

 • 

9 Messages

I've also noticed looking at my logs, when I get a DOS attack the source IP and Destination IP are always longer, so I'm assuming I'm only getting attacked on IPV6, because the IPV4 adress is always normal with generic discards. I've turned off IPV6 before but it still shows getting attacked on logs.

Brand User
ATTHelp

Community Support

 • 

125K Messages

@eagleone4.
 
 
You can try unplugging the router overnight and see if the IP refreshes, we have sticky IP's but the lease should time out. Also changing the router's MAC address in some cases might work.
 
Let us know if this helps!
 
 
Elmi, AT&T Community Specialist.

Still need help? Ask a question! Our 1.4 million members typically respond within 1 hour.

*I am an AT&T employee, and the postings on this site are my own and don't necessarily represent AT&T's position, strategies or opinions.

New Member

 • 

9 Messages

Okay, I'll try that. I don't know exactly when I can do that because I need my phone line up, and obviously you know when you unplug your router you lose everything with U-Verse, but I'll keep you updated when I do.

Brand User
ATTHelp

Community Support

 • 

125K Messages

No worries, @eagleone4!

 

Let us know when you get a chance, and what your results are from it.

 

If you need any further assistance from us, we'll be more than happy to help!

 

Donovan, AT&T Community Specialist 

Still need help? Ask a question! Our 1.4 million members typically respond within 1 hour.

*I am an AT&T employee, and the postings on this site are my own and don't necessarily represent AT&T's position, strategies or opinions.

New Member

 • 

1 Message

Not a techie here but I have been having issues with my residential u-verse internet gateway for the past several weeks. I had an AT&T service tech come out a week ago, who hard reset my modem and said everything was good to go. That worked for a few days, but now the problem has returned, and after looking at my security history I see a number of unknown IP addresses trying to connect to my computers UDP ports and TCP ports, including attempted UDP packet flashes. These have apparently been stopped by McAfee, but it has been disabling my internet connection. I'm now assuming this is related to ddos attacks as described above??

New Member

 • 

9 Messages

I know when I go to router settings, diagnostics tab and below that is logs, it will show other IPs with invalid packet IP. But it will be my other devices I use. I'm assuming that's normal, might check your device list and see if they match up to what you are seeing. I know when I get Dos or DDos attacked it will come reason tab by the proto tab. I haven't shut down my router overnight yet, but I really doubt it fixes it, especially since I replaced it with a new one, but if it doesn't I'm basically stuck with getting DOS unless I change service, I'm not paying for static IP I know that.

Get started...

Ask a new question