DoS attack: TCP- or UDP-based Port Scan] from 75.75.76.76, port 53

---

@Router-admshaik wrote:

internet is getting disconnected frequently and it is random.. this is what i see in event logs

 

 

[DoS attack: TCP- or UDP-based Port Scan] from 75.75.76.76, port 53	1	Thu Nov 19 13:41:49 2020
[DoS attack: TCP- or UDP-based Port Scan] from 75.75.75.75, port 53	1	Thu Nov 19 13:41:48 2020
[Internet connected] IP address:	1	Thu Nov 19 13:41:44 2020
[Time synchronized with ToD server]	1	Thu Nov 19 13:41:37 2020
[admin login] from source 192.168.0.10	1	Thu Nov 19 13:40:15 2020
[admin login failure] from source 192.168.0.10	1	Thu Nov 19 13:40:13 2020
[Time synchronized with ToD server]	1	Thu Nov 19 13:38:43 2020
[Internet disconnected]	1	Thu Nov 19 13:37:55 2020
[DoS attack: TCP- or UDP-based Port Scan] from 75.75.76.76, port 53	1	Thu Nov 19 13:31:43 2020
[DoS attack: TCP- or UDP-based Port Scan] from 75.75.75.75, port 53	1	Thu Nov 19 13:31:39 2020

---

75.75.75.75 and 75.75.76.76 are the Comcast DNS servers, and Port 53 is a legitimate DNS port.  Your security software is apparently flagging these as malware when they're not. 

then why is comcast dns sending incoming traffic ?? isnt it supposed to be just one way (outgoing) by nature of dns ??

This is the exact same issue I have been having lately. Never experienced it before.

Would be good to get an answer from Comcast.