Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[TribesTime]

Suddenly today in the middle of the work day, I can get to every domain EXCEPT for our own domain,
and I can't get email, probably due to it not accessing our domains which is where our email is hosted.

No setting changes or firmware changes and it's been plugging along fine for over a year.

Router Log shows Blocked packet from 192.168.0.1 to 192.168.0.1 (LAND Attack)
and it shows that is repeated dozens and hundreds of times.

Rebooting router didn't help; it goes right back to it.
It isn't a real attack - it's from within ?  That IP is the internal IP for my DIR-655 router.

What else to check / try?

[FurryNutz]

Welcome!
What Hardware version is your router? Look at sticker under router.
What Firmware version is currently loaded? Found on routers web page under status.
What region are you located?

I would disconnect every thing from the router, wired and wireless accept for ONE wired PC that you know isn't infected with anything and do a factory reset of the router. Disconnect the ISP modem from the router a well, just the PC and the router. See if you notice any log entries after the factory reset. While this is going on, run scans of all PCs to make sure nothing is infected. Run MalWare Bytes, a good program to have.

After the reset and if nothing is reported in the logs, connect one wireless device to make sure it connects just to the router. Review logs again. Make sure you set up wireless security for WPA2 and AES only is prefrerred, or Auto. Also set up the routers log in password with something new too.,

If all is still good, connect the ISP modem and review the logs and check internet connections.

[TribesTime]

Looks like a virus!  Got it handled for now I think.
THANK YOU.

[FurryNutz]

Enjoy.