NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
DOS attack UDP port scan from private network address
Hi, I have been getting non-stop DOS attack: UDP port scan from a private network address, is it some device in my network that is causing this issue? Can anyone guide me on how to identify the c...
This is called a "Link Local" IP address, which is created by a device when it is unable to get an IP from the network using DHCP.
I would start with the Orbi web interface Attached Devices display All of the devices shown with valid IP addresses (usually starting with 192.168.1) can be ruled out. Are there any other devices connected to the network that are not on the Attached Devices list?
This is called a "Link Local" IP address, which is created by a device when it is unable to get an IP from the network using DHCP.
I would start with the Orbi web interface Attached Devices display All of the devices shown with valid IP addresses (usually starting with 192.168.1) can be ruled out. Are there any other devices connected to the network that are not on the Attached Devices list?
A more technical approach would be to activate the feature on the debug page to Enable LAN/WAN Packet Capture.
(http://orbilogin.net/debug.htm)
If you are able to capture some of these "attacks", then a tool such as Wireshare (free for Windows, Linux, Mac) will provide the MAC address that is sending the packets. Put that into an on-line tool to identify which company manufactured the network card in the device.
(I like to use https://www.wireshark.org/tools/oui-lookup.html