CAX80 keeps rebooting

To make this easier, WAN v. LAN.

IF you have no idea on these than chances are you did not change anything 🙂

With that said a Modem just handles traffic.  It is only responsible for moving the 0's and 1's.  It doesn't translate anything, it doesn't tell the 0's and 1's were to go.  The ROUTER routes the 0's and 1's.  IT is the equipment response for sending stuff to your PC or Playstation or mobile device.  It uses a unique address, the IP Address.  Much as your house address is unique to you, your devices IP Address is unique to it.  Unlike our house address, the IP Address CAN change, unless it is dedicated or you are behind a Router.

Now then, with regards to the DoS Land Attacks.  When I log into my CAX80, the logs show:

The 192.168 addresses are called NAT, see description above.  THESE are provided by the Router side, these are how Home Routers are typically setup, but they can be changed to anything.  If you are curious to know more, you need to look up NAT or IP Address convections to learn more.  As for the others that show 73.65., this is the starting address assigned to Xfinity by the Global IP Address commission.  And when I look at the Modem IP Address it is the same as the Source under the DoS Land Attack.  IF you see the same then it is coming from WITHIN, if this is showing different then chances are it is coming from outside.  You can use any IP Address lookup tool to see the Source address and who it is assigned to.

So I see, these are coming suppossedly from the WAN side. Target is 255.255.255.255 oddly. 

In my case, the "source IP" is different from my Modem's IP and is the IP of my ISP (COX Internet). I've spent all week working with them on this and they're unsure what's going on. I've done full resets of the CAX80 (I've tried updating manually from files and from the NG server), COX came out and checked every cable and line and had no issues they could find, and COX has stated they're not seeing anything abnormal on their end.

It is worth noting that the reboots have stopped for me, my current uptime is now at 6 days, so some improvement. and I can now set up my reboots schedule again. Though I'm still getting those LAND attacks. The last 2 notices in the log had 25 reported 20 minutes before this write-up, and I had another one pop up while I was in the midst of writing this.

As additional troubleshooting, I've disconnected every single device from my network and still had these LAND attacks appear (disconnected everything but my wired PC, verified nothing was connected except the wired PC, unhooked wired PC, left house, came home hours later to find dozens of LAND attacks when nothing was connected to the network), so it's not any devices in my network causing it.

Yes if the reboots have stopped. Great to hear and know. 

For any other stuff please follow in the more appropriate post threads so we get all information inlcuded there.

Thank you.