how can I tell which one of my Hikvision cameras is instigating DOS attacks

Coldair

Coldair

IPCT+ Member
Sep 19, 2015
1,060
1,362
Naples Fl
I just had comcast change my dedicated IP Monday due to SYN DOS attacks all originating from China and today's log has another massive attack. I have updated all the firmware I can find, disabled UNMP. but still I get these attacks so I think my Hikvision Cameras are phoning home which triggers the attack. any ideas on who to stop this?

thanks

from the netgear log this AM

[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:07:43
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:07:40
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:07:39
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:07:34
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:07:30
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:07:29
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:07:29
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:07:24
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:07:23
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:07:21
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:07:21
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:07:19
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:07:18
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:07:16
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:07:12
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:07:11
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:07:07
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:07:04
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:07:03
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:07:00
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:58
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:54
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:52
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:52
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:51
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:50
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:48
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:45
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:44
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:42
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:40
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:39
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:39
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:39
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:37
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:35
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:34
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:33
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:33
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:32
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:30
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:29
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:28
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:27
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:27
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:23
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:21
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:19
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:17
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:16
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:14
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:13
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:09
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:08
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:07
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:03
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:03
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:06:00
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:05:57
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:05:53
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:05:52
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:05:48
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:05:47
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:05:45
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:05:44
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:05:43
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:05:42
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:05:39
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:05:38
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:05:30
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:05:30
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:05:27
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:05:25
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:05:24
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:05:23
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:05:20
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:05:19
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:05:15
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:05:14
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:05:09
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:05:09
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:05:05
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:05:04
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:05:03
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:05:02
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:04:57
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:04:54
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:04:52
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:04:49
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:04:49
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:04:47
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:04:39
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:04:38
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:04:38
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:04:37
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:04:34
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:04:34
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:04:29
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:04:27
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:04:24
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:04:23
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:04:22
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:04:20
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:04:18
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:04:16
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:04:13
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:04:11
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:04:03
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:04:03
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:03:59
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:03:58
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:03:54
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:03:51
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:03:48
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:03:47
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:03:44
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:03:39
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:03:38
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:03:33
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:03:31
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:03:27
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:03:27
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:03:26
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:03:26
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:03:21
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:03:16
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:03:15
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:03:13
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:03:10
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:03:05
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:03:04
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:02:58
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:02:53
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:02:47
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:02:46
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:02:42
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:02:39
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:02:35
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:02:33
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:02:32
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:02:31
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:02:27
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:02:24
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:02:22
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:02:15
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:02:13
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:02:10
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:02:07
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:02:05
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:01:59
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:01:59
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:01:54
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:01:53
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:01:48
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:01:47
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:01:45
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:01:43
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:01:42
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:01:39
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:01:38
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:01:36
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:01:33
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:01:32
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:01:31
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:01:26
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:01:26
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:01:25
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:01:22
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:01:20
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:01:19
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:01:16
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:01:15
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:01:13
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:01:11
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:01:09
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:01:07
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:01:06
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:01:02
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:01:01
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:00:58
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:00:57
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:00:57
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:00:56
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:00:53
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:00:47
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:00:46
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:00:42
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:00:41
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:00:39
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:00:38
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:00:35
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:00:35
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:00:31
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:00:30
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:00:25
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:00:20
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:00:20
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:00:20
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:00:19
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:00:16
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:00:15
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:00:12
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:00:10
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:00:09
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:00:07
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:00:02
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 23:00:01
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:59:56
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:59:56
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:59:55
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:59:55
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:59:51
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:59:50
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:59:46
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:59:45
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:59:44
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:59:44
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:59:40
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:59:39
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:59:38
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:59:38
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:59:36
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:59:35
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:59:34
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:59:31
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:59:31
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:59:25
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:59:23
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:59:21
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:59:20
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:59:18
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:59:17
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:59:11
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:59:06
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:59:01
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:58:56
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:58:56
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:58:51
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:58:46
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:58:41
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:58:41
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:58:35
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:58:30
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:58:25
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:58:20
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:58:20
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:58:15
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:58:09
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:58:04
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:57:59
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:57:54
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:57:49
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:57:44
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:57:44
[DoS Attack: SYN/ACK Scan] from source: 27.148.143.241, port 80, Wednesday, April 25, 2018 22:57:44
 
  • Like
Reactions: mat200
All the attacking IPs seems to originate for the same area in China
 
As previosuly mentioned, it's best to completely disallow access to the internet from your cam's IP addresses, if your router supports that,
but if you can't do that at least do the following:

1) make sure you have UPNP disabled on your ROUTER.
2) reboot your router to clear out any ports that may have been previously opened via UPNP
3) check ALL your cams to make sure UPNP, NAT/port-mapping, and 'Platform Access' are all disabled.
These are what enable the 'phone home' features that allow attackers to find your cams...
 
1) How do you know it is the cameras ?
2) what is the make and model number of the comcast modem/router
3) If you are using a stanalone router, Make and model number ?
4) Why do you have a dedicated IP address ?
 
your router's UI should show you which ports are open and which internal IP's they are mapped to...
 
These are not caused by your cameras "phoning home". Even if your cameras were phoning back to hikvision, they would not be interested in a ddos attack.
 
good point, F'man.

we probably all have these on a regular basis. only a problem if they come in faster than your router can deal with them (but 1 or 2 per second is nothing)

and as they all come from the same IP, it's not a DDoS, just a DoS attempt (not Distributed). :-)
 
  • Like
Reactions: fenderman
You must log in or register to reply here.
Top Bottom