NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
steveberry10
May 29, 2022Tutor
[DoS attack] LAND Attack SPT:2190 DPT:2190
Hi All, I had an issue last week with my Orbi system. Long story short, I was receiving a ton of DDoS messages from all my devices attached to my home network. After talking this over with a fe...
steveberry10
May 29, 2022Tutor
Thanks but I don't see anything in that link other than a description of the problem? Anyway, yes that basically describes it. However it's not affecting my internet service.
I did see an old article from around 2015 where these were caused by having Access Control turned on...and I set that up at the same time I updated the firmware. In fact Access Control was on when I rebooted after the firmware update. Hmmm...
Anyay, I am still getting the NULL attack messages as well. I've logged an incident with my ISP. Hopefully these are just false positives.
FURRYe38
May 30, 2022Guru - Experienced User
Might try a factory reset and setup from scratch. This time, don't setup Access Controls or any additional features. Check the logs.
- steveberry10May 31, 2022Tutor
Thanks Furry, I've thought about that. The thing is I see two types of attacks: the LAND attacks and the NULL attacks. The latter have a legit source IP which seem to be coming from China.
I've opened a ticket with my ISP and I'm waiting to hear back from them.
- steveberry10Jun 02, 2022Tutor
Okay, I've done the factory reset. Access controls are disabled and the only changes from default are turning off UPnP and enabling smart connect for my Wi-Fi. I'm still receiving the LAND attack messages. I've also enabled the armor security however the messages were coming in well before that.
The factory reset didn't go smoothly. I had issues with the Nighthawk app connecting to the router. I had to half set it up with the app and finish the setup by logging into the admin web page.
I did hear back from the Comcast security team however their response was basically useless. All they said was factory reset, use a VPN, etc. They never even bothered to research where the attack was coming from.
At this point I may just return the Netgear and get my money back. I'm not sure what else I can do at this point and I'm beyond frustrated.
- kP206Jun 14, 2022Guide
Hey Steveberry,
Im getting the same message on my Router Log's as well. "[DoS attack] LAND Attack PT:2190 DPT:2190" Did you find out the issue? One of my friends that's in IT security said the 255.255.255.255 is a local network pinging the system. So im slowly turning off computer and accessories around the house one by one until I find which computer or node. Im out of ideas right now.
did you fix your issue?
btw, I have a CAX80 modem too.