NIghthawk - IP Spoofing Solutions

[Mark_Spilker]

Our Nighthawk log continues to generate activities such as the following listed below, despite the computer both in airline mode & shut down entirely.  Is anyone aware of a feature to eliminate this activity & find it's source at our business? 

[DoS Attack: IP Spoofing] from source: 192.168.1.5, port 1901, Wednesday, April 25, 2018 11:24:40

[schumaku]

Can be a spoofed attack directed to your router Internet/WAN interface, in attempt to test for certain UPnP vulnerabilities.

[Mark_Spilker]

Sounds like you're saying it is not coming from that specific IP address.

Yes?

[schumaku]

Yes. Spoofing can nick "any" source IP addess - the source does not have to be on your (W)LAN.

[Mark_Spilker]

Any suggested features on the Nighthawk to use?

[schumaku]

What else do you expect beyond of the DoS detection (and blocking) schemes in place for years?