Visitor
•
1 Message
Can I block incoming requests by IP range?
In the past 5 or 6 days, my router has been logging a ton of ACK/SYN scans from IP addresses originating in Turkey (though some of them look spoofed, or possibly from a VPN). They're always sending the request on port 80, and hit a few times per minute. So it looks like someone's checking to see if I'm running a web server, possibly to find an exploit. In that same time, I've noticed that general Internet latency has been horrible. I suspect all these scans are having some effect on my connection. Is there any way that Comcast can block an entire range of IP addresses so that they don't ever reach my router? I realize that all these entries in my logs indicate that the security settings are good, but it seems to be adversely affecting our general Internet health.
Here are some lines from my router log (Netgear Orbi):
[DoS Attack: SYN/ACK Scan] from source: 212.133.164.1, port 80, Tuesday, July 06, 2021 12:44:25
[DoS Attack: SYN/ACK Scan] from source: 212.133.164.189, port 80, Tuesday, July 06, 2021 12:43:34
[DoS Attack: SYN/ACK Scan] from source: 212.133.164.127, port 80, Tuesday, July 06, 2021 12:43:12
[DoS Attack: SYN/ACK Scan] from source: 212.133.164.204, port 80, Tuesday, July 06, 2021 12:39:33
[DoS Attack: SYN/ACK Scan] from source: 212.133.164.136, port 80, Tuesday, July 06, 2021 12:39:27
[DoS Attack: SYN/ACK Scan] from source: 212.133.164.241, port 80, Tuesday, July 06, 2021 12:36:39
[DoS Attack: SYN/ACK Scan] from source: 212.133.164.227, port 80, Tuesday, July 06, 2021 12:34:04
[DoS Attack: SYN/ACK Scan] from source: 212.133.164.55, port 80, Tuesday, July 06, 2021 12:33:39
[DoS Attack: SYN/ACK Scan] from source: 212.133.164.209, port 80, Tuesday, July 06, 2021 12:30:47
[DoS Attack: SYN/ACK Scan] from source: 212.133.164.175, port 80, Tuesday, July 06, 2021 12:29:43
[DoS Attack: SYN/ACK Scan] from source: 212.133.164.3, port 80, Tuesday, July 06, 2021 12:29:24
[DoS Attack: SYN/ACK Scan] from source: 212.133.164.148, port 80, Tuesday, July 06, 2021 12:28:43
[DoS Attack: SYN/ACK Scan] from source: 212.133.164.205, port 80, Tuesday, July 06, 2021 12:28:40
[DoS Attack: SYN/ACK Scan] from source: 212.133.164.12, port 80, Tuesday, July 06, 2021 12:28:00
[DoS Attack: SYN/ACK Scan] from source: 212.133.164.97, port 80, Tuesday, July 06, 2021 12:26:36
[DoS Attack: SYN/ACK Scan] from source: 212.133.164.0, port 80, Tuesday, July 06, 2021 12:26:31
[DoS Attack: SYN/ACK Scan] from source: 212.133.164.249, port 80, Tuesday, July 06, 2021 12:23:38
[DoS Attack: SYN/ACK Scan] from source: 212.133.164.187, port 80, Tuesday, July 06, 2021 12:22:34
CCTambrey
Gold Problem Solver
•
3.4K Messages
4 years ago
Hello, @Plan-B! We appreciate you taking the time to reach out to us here on the Xfinity Forums for support with this issue.
Looking over your logs, I agree, it is good to see your security is doing its job but this is something that should be addressed. You will want to reach out to our Customer Security Assurance team at their toll-free number:1-888-565-4329.
Our outstanding team there should be able to help you get this all sorted out! :)
0
0