DOS Attacks

[Dianysis]

Good day.

I was looking at my router logs and I keep getting the following:

[DOS Attack] : 87 [STORM] packets detected in last 20 seconds, source IP [105.16.163.3]

It is from the same IP address over and over again.

Any suggestions?

 

[gregmcc]

That IP is Seacom Johannesburg PoP Speedtest.

Have you need doing any speed tests?

 

[Dianysis]

Thank you for the quick response. Yeah I have. I have noticed that my internet is dead at the times indicated on the logs. Anything I can do? Any way to see who is the culprit?

 

[Dianysis]

Additionally - i was not running any speed tests at the time when the attacks occurred.

 

[Dianysis]

I see they show up after running a speedtest using Ookla's Speedtest Android app. Anything to worry about?

EDIT: changed the server and it seems to have stopped.

 

[biometrics]

87 packets over 20 seconds doesn't sound like a big deal. Your router is discarding packets all the time. There are billions of devices scanning and probing all the time.

 

[Dianysis]

87 packets over 20 seconds doesn't sound like a big deal. Your router is discarding packets all the time. There are billions of devices scanning and probing all the time.

Thanks for the reply. Still learning. Appreciate the info.

 

[MickZA]

Just your firewall doing its job, here's mine so far today:



Check your router at Shields UP - https://www.grc.com/x/ne.dll?rh1dkyd2

 

[Dianysis]

Just your firewall doing its job, here's mine so far today:

View attachment 427578

Check your router at Shields UP - https://www.grc.com/x/ne.dll?rh1dkyd2

Thank you.