Since a few months I keep on having my TPLink router losing connection to the internet. This happens almost every week.
My Vodafone router shows DoS TCP SYNC attack logs like the one below:
DoS Attack - TCP SYN FloodingIN=erouter0 OUT= MAC=******************** src=108.128.29.165 DST=**.**.**.** LEN=60 TOS=0x00 PREC=0x00 TTL=112 ID=8766 DF PROTO=TCP SPT=57503 DPT=7127 WINDOW=64240 RES=0x00 SYN URGP=0
This Irish IP is already marked as abusive here: https://www.abuseipdb.com/check/108.128.29.165 . Another recent attacker IP is a Pakistani one, 125.209.97.51.
While I cannot do anything about them, what can Vodafone do to block them somehow?
The biggest issue with such attacks is that the wired devices in my network (my TPLink router) get disconnected from internet for a while. As I work from home, there's a big inconvenience dropping from meeting or getting disconnected from remote sandboxes.
Can the Vodafone (or the router) do something to prevent downstream devices losing their internet connection?
Can I do anything on my side to prevent such issues?
