cancel
Showing results for 
Search instead for 
Did you mean: 

TCP SYN Attack / Changing IP

BuffaloRun
Newbie
Posts: 3
Thanks: 3
Registered: ‎26-02-2024

TCP SYN Attack / Changing IP

Is anyone else experiencing an extremely high number of TCP SYN Attacks? I've been getting thousands of attacks per hour, and they are very persistent, over several months.

What's the best way to change my IP address, would turning off the OpenReach box achieve this? If so, how long does it need to be off?
2 REPLIES 2
jab1
Legend
Posts: 19,373
Thanks: 6,380
Fixes: 290
Registered: ‎24-02-2012

Re: TCP SYN Attack / Changing IP

@BuffaloRun As PN Ip's are rather 'sticky', I would try turning your connection off overnight - note the IP you have now, and hope the one allocated in the morning is different.

John
outcast
Newbie
Posts: 4
Registered: 2 hours ago

Re: TCP SYN Attack / Changing IP

@BuffaloRun  does your router's log file show the IP addresses that the TCP SYN packets are coming from ?

 

Years ago I had an issue where my firewall log filled up with thousands of unsolicited SYN packets, which turned out to be a configuration problem with the Plusnet email server's load balancer after an upgrade, which after I reported the fault they eventually fixed. 

 

I see you are asking how to change your address, note that changing my static IP address wouldn't have cured the problem, as the spurious SYN packets were generated as my Thunderbird IMAP email client interacted with the Plusnet email servers.

 

I'm wondering if you could identify the source of your blocked incoming SYN packets, whether you could raise a fault report with the sender, or create a firewall rule to quietly handle the annoyance so that your log file isn't overwhelmed ?

.