Thema "Betreff: How to mitigate DoS Attack - TCP SYN FloodingIN=erouter0 ?" in Geräte

How to mitigate DoS Attack - TCP SYN FloodingIN=erouter0 ?

Lucian2 — Fri, 08 Aug 2025 10:30:44 GMT

Since a few months I keep on having my TPLink router losing connection to the internet. This happens almost every week.

My Vodafone router shows DoS TCP SYNC attack logs like the one below:

DoS Attack - TCP SYN FloodingIN=erouter0 OUT= MAC=******************** src=108.128.29.165 DST=**.**.**.** LEN=60 TOS=0x00 PREC=0x00 TTL=112 ID=8766 DF PROTO=TCP SPT=57503 DPT=7127 WINDOW=64240 RES=0x00 SYN URGP=0

This Irish IP is already marked as abusive here: https://www.abuseipdb.com/check/108.128.29.165 . Another recent attacker IP is a Pakistani one, 125.209.97.51.

While I cannot do anything about them, what can Vodafone do to block them somehow?

The biggest issue with such attacks is that the wired devices in my network (my TPLink router) get disconnected from internet for a while. As I work from home, there's a big inconvenience dropping from meeting or getting disconnected from remote sandboxes.

Can the Vodafone (or the router) do something to prevent downstream devices losing their internet connection?

Can I do anything on my side to prevent such issues?

Betreff: How to mitigate DoS Attack - TCP SYN FloodingIN=erouter0 ?

RobertP — Fri, 08 Aug 2025 11:47:22 GMT

versetze die Vodafone Station in den Bridge Mode

wenn du einen vernünftigen TP-Link Router hast und nicht so ein Billigteil für 30€, sollte der solche Angriffe abkönnen

und den Router mal über Nacht vom zu Strom nehmen, damit er eine neue IP bekommt, kann auch nicht schaden

Betreff: How to mitigate DoS Attack - TCP SYN FloodingIN=erouter0 ?

Lucian2 — Fri, 08 Aug 2025 13:14:56 GMT

I am running

Firmware version: 01.04.137.08.EURO.PC20 Product name: Vodafone Docsis 3.1

and unfortunately my device does not have that option in the settings menu.

I'll push on with the issue if the problem gets worse.

Betreff: How to mitigate DoS Attack - TCP SYN FloodingIN=erouter0 ?

Kurtler — Fri, 08 Aug 2025 13:20:03 GMT

Which federal state are you from?

Betreff: How to mitigate DoS Attack - TCP SYN FloodingIN=erouter0 ?

RobertP — Fri, 08 Aug 2025 13:33:48 GMT

schau mal unter Einstellungen im Kundenportal

Betreff: How to mitigate DoS Attack - TCP SYN FloodingIN=erouter0 ?

Lucian2 — Fri, 08 Aug 2025 14:26:44 GMT

Berlin, 1Gb cable connection, old contract, old device

Betreff: How to mitigate DoS Attack - TCP SYN FloodingIN=erouter0 ?

Lucian2 — Fri, 08 Aug 2025 14:34:58 GMT

👍Vielen Dank !!!
Für andere: finden Sie es unter https://www.vodafone.de/meinvodafone/services/meine-produkte/internet-phone/geraete-einstellungen?accordion=bridgeMode

Betreff: How to mitigate DoS Attack - TCP SYN FloodingIN=erouter0 ?

Kurtler — Fri, 08 Aug 2025 14:51:51 GMT

Da der Thread als gelöst markiert wurde, mache ich hier dann ein Schloss dran.

Gruß Kurt