I need to change my ip

@BruceW​ A few things to mention...

1. Bridge Mode is just going to port the attacker directly to a target system...

2. What Everday user has multiple Xfinity approved modems and routers just lying around...

3. Whether rental or customer owned gateway if the DHCP source (Xfinity) refuses to change your IP it will just be reassigned to the new equipment...

The only way to resolve this issue if for Xfinity to assign a new IP then either setup a vpn at the router or use a vpn from the client, HOWEVER, the second the VPN isn't used even one time the attacker will have the new router IP and begin the DDoS attacks once again.

I am having multiple DDoS attacks caused by an XBox account accessing my IP via XBox chat (Playstation works the same way). Once they establish in-game or XBox comms with you they can use Wireshark to retrieve your router IP address. This can also occur using Discord chat services.

@XfinityCassandra 

A real fix would be allowing the modem to release the IP and renew with a NEW IP address. Somehow all the Xfinity employees with so much education and experience haven't figured this one out?!? Only a customer needing static IPs for server or remote access should have a static ip, and with dynamic dns serivces these days even a statyic ip is not needed.

When will Xfinity learn this lesson OR do they just not care because you have nowhere else to go...

EDIT:

You could use a MAC changer to change the address of the modem, but then your opening a new can of worms...

@user_a65a70​ That's not a fix and and most folks are using isc's version of dhcp.  Nobody is going to re-write code to change the way leases are handled.    You have an xbox and equipment selection problem, with a hostile traffic abuse problem.  Such is the internet.

I wouldn't hold out too much hope for an abuse department at an ISP doing anything about hostile traffic, but I'd still log and report it.  Maybe you can have their internet account canceled if it's a single source.   On a single source or distributed attack, what you can do is block the sources with a firewall, be that an ISP, nation state, cloud provider, CDIR range  or whatever.  Block the world if you want.  The script kid can beat their head all they want on your firewall, it won't matter.   Likely hangs the remote end too.

Build one with a junk PC:  https://docs.netgate.com/pfsense/en/latest/index.html  Adaptive firewalling works too.  Learning curve on your part for that as well.

We appreciate where you are coming from. You may be able to release and renew your IP address by following the directions in this link: https://www.xfinity.com/support/articles/releasing-and-renewing-ip-address

@XfinityBillie​ @user_3c046d 

If one is behind a router or a combo modem / router gateway device, that will only serve to release and renew the private / LAN IP address that the router's built-in DHCP server assigns to the client, not the public  / WAN IP address that the Comcast DHCP server assigns to the modem / connection.

They are looking to get their WAN / public IP address changed.