NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
[DoS attack] LAND Attack SPT:2190 DPT:2190
Hi All, I had an issue last week with my Orbi system. Long story short, I was receiving a ton of DDoS messages from all my devices attached to my home network. After talking this over with a fe...
steveberry10 wrote:
I had an issue last week with my Orbi system. Long story short, I was receiving a ton of DDoS messages from all my devices attached to my home network.
Netgear's firmware is great at creating false reports of DoS attacks. Many of them are no such thing.
Search - NETGEAR Communities – DoS attacks
Use Whois.net to see who is behind some of them and you may find that they are from places like Facebook, Google, even your ISP.
Here is a useful tool for that task:
IPNetInfo: Retrieve IP Address Information from WHOIS servers
If these events are slowing down your router, that may be because it is using up processor time as it writes the events to your logs. Anything that uses processor power – event logging, QoS management, traffic metering – may cause slowdowns. Disable logging of DoS attacks and see if that reduces the problem. This does not prevent the router from protecting you from the outside world.
Thanks Michael. The issue with the Orbi did cause the router to block my devices so in that sense it did cause an interruption of service. However, after talking it over with some of my coworkers (who are more knowledgeable than I) we generally agreed it was a hardware issue.
There is no interruption of service with the CAX80 but I'm still getting flooded with the LAND and NULL attack messages. Unfortunately there's no other IP address associated with them and if there is one it's buried in all the other stuff coming in.
I did log a case with my ISP. Hopefully they can tell if something is really going on.