NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
DoS attack, Teardrop or derivative, Ping of Death, strange non-DHCP IP address connected to wifi
I'm getting lots of Dos attacks logged in my C3000 modem/router. They appear to be coming from inside my network, from my wifi. I keep seeing a device attached to my wifi with an IP address of 1.1.15...
i am having same issue with new HP Envy Photo 7155 printer. The printer is generating hundreds of UPnP packets. The router thinks it detects a teardrop attack, and apparently resets the connection. All of my devices lose connectivity. I work from home, so this is especially frustrating during conference calls!
Here is one example:
[DoS attack: Teardrop or derivative] from 10.x.x.x, port 49087
Source: 10.x.x.x:49087 (HP Printer)
Target: 239.255.255.250:65535
Count: 816 packets
So, my router thinks the printer is generating a DoS attack. However, this has to do with UPnP and SSDP uses 239.255.255.250 for the unicast and multicast adress.
Cannot decide which to return to the store... Netgear router, or the HP printer. One of these must go!
If you turn off IPv6 on the HP printer the DOS attacks will stop! Both HP and Netgear have a fix for this issue. The patch is in testing now and will be released through your ISP.
About time, if there is a fix. However, my situation is a bit different. iPhone sends packets always to port 0 and to sites like the Dept of Defense or something usually in the news whether corporate or geoivernment foreign agency. Does not seem random and I still belive it is not.
Your printer (7155) and your Router (C7000,C6900, C7000v2, C3000, C3700, C6220, C7100V ) combination causes DOS errors.
Turning off IPv6 on the Printer will stop the DOS attacks from the router and printer. You sending packets on your iPhone is not part of the fix.
It sounds like you have a virius on your phone...
I do not have a virus. The ip address of the iPhone changes to the same IP address in Texas and sends packets. 100's of Netgear owners have this. 100's. Many posts. Its a netgear bug well know for several years and nothing done. Google it.
Sorry... I only know about HP printers and how they react to Netgear routers. It was just a guess from the info you supplied.
Thanks, this worked! The HP printer events stopped. Network seems stable.
I still see suspected teardrop attacks in the logs where both To and From addresses are not on my network. Apparently, the volume of packets (hundreds per log entry) from my HP printer caused the router to reset. The other events have less than 20 packets per log log entry.
Target: 64.64.75.252:0 Source: 192.1.143.208:0