IP spoof attack

[koolghost]

My router's log show this 'DoS: IpSpoof Attack source=192.168.1.1 destination=224.0.0.251' every few minutes. 192.168.1.1 is my router's default address for settings. I have a Zyxel NBG-418N v2 n300 router with the latest firm installed. Is it some sort of DoS attack from my router?

 

[bill001g]

That is likely some garbage from a apple device. It has to be a device inside your network because it is a multicast packet which can not be sent over the internet.

 

[koolghost]

I have an apple iPhone but it is not connected to the network for most time of the day and the DoS IPspoof log is shown throughout the day, even when the device is not connected.

 

[bill001g]

It can some other device but that multicast address is used by apple mostly.

In any case it must be a device inside your house. Maybe the logs show the mac address of the device sending it.

 

[koolghost]

It can some other device but that multicast address is used by apple mostly.

In any case it must be a device inside your house. Maybe the logs show the mac address of the device sending it.

The logs do not show the mac address. However logs of ip addresses being assigned to devices occur often even though no device is disconnected or new device connected. The ip address are the same for each device as they were in the previous ip address log. Also logs of lan port up and down appear at certain devices even though no device connected to lan was turned on. Should i be worried about something.

 

[bill001g]

Change you wifi password and make sure WPS is disabled. After that it is not likely there is some bad device on your network.

 

[koolghost]

Change you wifi password and make sure WPS is disabled. After that it is not likely there is some bad device on your network.

I changed my wifi password and WPS is disabled. I didn't connect any device execpt a PC via lan port. I'm still getting those logs. I use cloudflare 1.1.1.1 dns if that helps. Should i reset my router or contact my isp?

 

[bill001g]

Contact you ISP is a waste of time it is device INSIDE your house. So unless some hacker is hiding inside your house it is some device you own doing something strange. It is not likely any issue. Sometime it would be better if these routers did not warn about things.

 

[koolghost]

Contact you ISP is a waste of time it is device INSIDE your house. So unless some hacker is hiding inside your house it is some device you own doing something strange. It is not likely any issue. Sometime it would be better if these routers did not warn about things.

I get the logs even when no devices are connected to the network. Guess i'll just let it be.