I have been seeing DOS ATTACKS in my log files.
DoS Attack: TCP- or UDP- from 8.8.8.8, port 53 (This is Google DNS)
DoS Attack: Teardrop or derivative from 192.168.0.20, port 33387 (This is my Apple TV)
DoS Attack: Teardrop or derivative from 192.168.0.20, port 5353 (This is my Apple TV)
DoS Attack: SYN Flood from various IP addresses, port 443
DoS Attack: Teardrop or derivative from 192.168.0.32, port 5353 (This is my HP Printer)
In addition I have seen in Attached Devices where the IP address was something not even on my network.
Android & iPhone changed to 1.0.116.48 but the IP address on the phone stayed at 192.168.0.XXX
Then I would get DoS Attack: Teardrop or derivative from 1.0.1167.48, port 0
I have also seen where my MacBook Pro IP address changed to 172.20.20.20 in attached devices but remained 192.168.0.XXX
Under Wireless Card Access List I have turned on Access Control and entered all the MAC Addresses that is allowed.
Under Setup I have setup reserved IP address for each MAC Address.
Under Access Control I have turned it on and Blocking all new devices from connecting.
Guest network is turned off for right now as well as UPnP is turned off.
I also do not have anything added to my Port Forwarding.
[DoS attack: TCP- or UDP-based Port Scan] from 8.8.8.8, port 53 | 1 | Sun Jan 24 13:37:58 2016 | 69.249.11.29:49353 | 8.8.8.8:53 |
This IP Address is Google DNS
[DoS attack: Teardrop or derivative] from 192.168.0.20, port 5353 | 4 | Sun Jan 24 13:17:25 2016 | 224.0.0.251:5353 | 192.168.0.20:5353 |
This IP Address above is my Apple TV
[DoS attack: SYN Flood] from 204.154.110.237, port 80 | 1 | Sun Jan 24 11:06:35 2016 | 192.168.0.35:53403 | 204.154.110.237:80 |
DoS attack: Teardrop or derivative] from 192.168.0.32, port 5353 | 8 | Sun Jan 24 08:18:45 2016 | 239.255.255.250:5353 | 192.168.0.32:5353 |
This IP Address above is my HP Printer
Anyone able to help me understand what is happening here? Comcast is no help at all.
