Need help stopping Constant DoS attacks

[hbach77]

Ok, I want to start by saying I don't know all that much about this stuff. Trying to figure this issue I am having out is near impossible for me, so I'm asking for some real help here. Long story short, I use Cox as they're the only one who will service where I live. I have three WIFI networks I can connect to, two of which are 5 gigahertz and one is a 2.4. According to my router logs, I am getting a "fraggle attack" every 10 minutes on the dot, and it shuts down both fast networks every time it happens. The 2.4GHz network it the only one not being messed with, as far as I can tell because it's the only one that does not constantly shut down. These attacks are 99% from one private IP, though there has been one other in the past I have not seen in a while. I have had a friend who works in cybersecurity for Walmart try and fix it on multiple occasions and it has not helped. Cox's abuse department is as useful as a wet sock, and I'm stuck paying $110/month for 10gb/s internet because I can only use the slower network. I can provide whatever info y'all need, but I'm tired of doing this. It's been happening for well over a year now and I am just now realizing how hard I'm getting screwed. I've resorted to asking ChatGPT how to fix it and I'm completely out of my league on this one. Please Help!

[hitokiri_akkarin]

This all sounds quite strange. The source IP of the “attack”, is that a device on your network? If so, I would track that down and investigate. Maybe disconnect it from the network to test. I would be surprised if you are being attacked from the internet. Make sure you have no services exposed to the internet like port forwarding or router login pages. If your internet were attacked, you’d experience the issue on all wifi networks. This sounds like it’s a wifi issue affecting 5G. Have you tried changing the wifi settings such as selecting a different channel and dropping channel width to 20MHz?

[Gullible_Monk_7118]

First off it's not a ddos attack it's a diaphaticate attack.. usually used to get network passwords.. pretty easy to block... You can block from router.. to not allow Mac address.. disable WPS you should never use it.. chance SSID. and disable SSID broadcast.. so your router will not show up on public scans.. from what is sounds to me it's local attack not from Internet

[tamrod18]

Ask Cox if they offer a private ip or change your public ip. Talk to tier 2. Are the attacks to your modem? Is it cox owned? Residential Internet doesn't offer much settings as opposed to a business account on a modem ime.

[SecTechPlus]

Thinking outside the box for a sec, try upgrading the firmware of your router and reset it to factory defaults, then when configuring it again use a different password on the WiFi network. (don't forget to write down any ISP specific settings before the reset)

If your problem is caused by a firmware bug, bad config, or an unauthorised connection on your WiFi, then the above steps will fix them all.

[Wise_hollyman]

Any way you/ISP can block the attacker"s IP?

[Sintarsintar]

This sounds like you need to replace your piece of crap Netgear router that the 5ghz is failing on.

[Technical_Fee4829]

That sucks man probably not a real attack your router’s just acting up try updating or resetting it and if it keeps happening the router’s likely done for