NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
steveberry10
May 29, 2022Tutor
[DoS attack] LAND Attack SPT:2190 DPT:2190
Hi All, I had an issue last week with my Orbi system. Long story short, I was receiving a ton of DDoS messages from all my devices attached to my home network. After talking this over with a fe...
tamanaco
Jun 25, 2022Apprentice
Same here... at about the same intervals using 2.1.3.7 - The source IP of the [DoS attack] LAND Attack SPT:2190 DPT:2190
messages is the ISP (Spectrum) assigned CAX80 Modem (WAN) address.
Today, for the first time, I got a series of [DoS attack] SYN Flood SPT:xxxxx DPT:xxxx messages like the one below. The SPT: Port number and DPT: Port number changes from message to message. I'm assuming these are random port numbers. The target (xx.xxx.xxx.xx:3359) is my ISP assigned address, but the source (193.239.86.210:55441) is unknown to me, and apparently, it's originating from Hong Kong. The series of about 10 consecutive messages stopped about two hours ago. Did anyone get similar messages?
Before anyone asks... yes, I've already followed the usual troubleshooting steps... Please, don't ask me to reboot or reset the CAX80.
[DoS attack] SYN Flood SPT:55441 DPT:3359 1 Sat Jun 25 14:31:49 2022 xx.xxx.xxx.xx:3359 193.239.86.210:55441
Omnitron
Jun 26, 2022Guide
LAND attacks from our own ISP IP address is a widespread issue since 2.1.3.7 and should be addressed here by Netgear. But other types of attacks (esp. ones originating from external IP addresses) are unexpected and probably real — you could maybe ask your ISP if they have further guidance.