DOS attack? Dont think so

[Micks22]

Hello,

Just registered here because my WNDR3800 is giving me headaches.
This is what I read in the logs, but I am 100% sure that it is no DOS attack, but a failure of the router/firewall in some way. But I dont know in what way.

Also, it gets really bad sometimes, then the router and the internet are not accessible. Looks like the router hangs then. But its not always and it is surely not caused by other devices since I disconnected all but one device, and did it for al my devices, but the router still got new messages like this in the logs.

Can anyone help me? Suggestions?

Thanks!



[DoS Attack: IP Spoofing] from source: 192.168.1.103, Monday, June 11,2012 21:52:33
[DoS Attack: IP Spoofing] from source: 192.168.1.254, port 3620, Monday, June 11,2012 21:52:27
[DoS Attack: IP Spoofing] from source: 192.168.1.254, port 3619, Monday, June 11,2012 21:52:27
[DoS Attack: IP Spoofing] from source: 192.168.1.254, port 3618, Monday, June 11,2012 21:52:27
[DoS Attack: IP Spoofing] from source: 192.168.1.254, port 3617, Monday, June 11,2012 21:52:27
[DoS Attack: IP Spoofing] from source: 192.168.1.254, port 3616, Monday, June 11,2012 21:52:27
[DoS Attack: IP Spoofing] from source: 192.168.1.103, Monday, June 11,2012 21:50:30
[DoS Attack: IP Spoofing] from source: 192.168.1.100, Monday, June 11,2012 21:50:29
[DoS Attack: IP Spoofing] from source: 192.168.1.103, Monday, June 11,2012 21:48:27
[DoS Attack: IP Spoofing] from source: 192.168.1.100, Monday, June 11,2012 21:48:27
[DoS Attack: IP Spoofing] from source: 192.168.1.102, Monday, June 11,2012 21:48:18
[DoS Attack: IP Spoofing] from source: 192.168.1.103, Monday, June 11,2012 21:46:14
[DoS Attack: IP Spoofing] from source: 192.168.1.102, Monday, June 11,2012 21:44:21
[DoS Attack: IP Spoofing] from source: 192.168.1.100, Monday, June 11,2012 21:44:09
[DoS Attack: IP Spoofing] from source: 192.168.1.102, Monday, June 11,2012 21:43:09

[N_Da_Game]

That is a private IP address cannot be routed on the public internet. I wonder if the spoof is originating on your internal network.I recommend you start with scanning your PC for malware just to rule out any trojans trying to phone home. I occasionally run both of the free apps downloaded from malwarebyes.org and superantispyware.com on all PC's on my home network.

You may also want to reset your router back to factory default and manually program it.

[fordem]

The fact that you're loosing access to the internet suggests that there is an attack of some sort - now I'm curious, you're seeing this in your logs, you're experiencing the "denial of service" - what makes you so sure that it's not an attack?

It may not be that you have been targeted by a hacker, perhaps it's equipment failure (not necessarily your firewall/router), it may be a software issue or malware (on your network or on another one of your ISP's users), but the evidence is there.

[jmizoguchi]

seems like malware on pc could be a source on this one