Cisco DPQ3925 - DoS-type alerts in firewall log
I'm seeing strange DoS-type alerts in the firewall log for my Cisco DPQ3925 gateway. This has been happening for at least a few days...possibly longer because I've never looked at the firewall log before. The log entry contains the following: Description: Teardrop or derivative Count: 58 Last Occurrence:Tue Sep 27 06:53:28 2016 Target:180.8.210.155:0 Source:0.0.63.0:0 Neither of those IPs are DHCP addresses since my network is in the 192.168.0.0/24 space. Over the past few days I've seen other examples for different remote target IPs and different descriptions including "Illegal Fragments" and "Ping of Death". So the alerts generally look like DoS attacks, but I'm not clear if the packets are inbound or outbound from my network. Sorry I cannot post a screenshot because the forum image selector is not working for me in the latest Chrome. When I look at the Connected Devices Summary in Setup > Lan Setup, there are no devices with either the target or source IP. Here's what I did years ago to secure the network: Changed default admin password to a strong password WPA2-Personal AES PSK, broadcast enabled MAC whitelist filter Remote management: disabled SPI firewall protection Off, because Xbox won't work with it on despite attempts to port forward etc. Block Anonymous Internet Requests: On Tiffany R re-pushed the latest firmware to the router about 24 hours ago, so the firmware is (and was) up-to-date and the activity is still happening. Has anyone seen this behavior before?1.5KViews0likes1CommentCisco DPQ3925 firmware update? - Sept 2016
Is there a firmware update forCiscoDPQ3925 routers past March 2016? I found an article from March 2016 saying that Cisco patched multiple flaws in their routers, includingDPQ3925. I'm curious if Cox has updated firmware from Cisco that it could apply. Here is a link to the article: http://www.securityweek.com/serious-flaws-patched-cisco-modems-gateways My DPQ3925 firmware has these details: - Current Software Revision: d3925-P15-5-c2100r5593-151216a-COX - Firmware Name: d3925-P15-5-c2100r5593-151216a-COX.bin - Firmware Build Time: Dec 16 10:42:59 2015 If there is no firmware update, and I want to re-flash my firmware to do a deeper factory reset, where can I find this .BIN file from Cox? Thanks, Peter5.6KViews0likes4Comments
Internet Download Speed Extremely Slow
I just figured out how to add my own account to my mom's. We've been having issues with our speed since we've had Cox. I understand there's too many people on the node (from local tech that came to our house last month), but we weren't told we were going to have problems like this. I can't take a Cox speed test, because only my mother's account can do that. Here's our speeds from November 21-25 of 2015: tests. We are supposed to get "up to 100 Mbps" but here lately we haven't been able to even reach 10 Mbps. To top it off, because of how slow it is if all three of us are online at the same time, we can't do anything. Yes, we're from Northwest Arkansas where it's been raining a lot recently, but we've been having problems before the rain. Lately we've been thinking our problem might be that we're on a splitter with a neighbor, because we've done some looking into it and some people's problems have been that. They ended up getting their own line and they were fine. We have the DPQ3925 gateway and my parents don't have the money to buy our own modem and router. When I get my refund in the spring from financial aid, I've been planning on building a computer, but if the internet is horrible, why build something that I can't enjoy. I just made a League of Legends team and I need to practice daily, but I can't because of the problems we're having. Are you guys able to find out when they're fixing the node in our area? Results from Riot's League of Legends' official network diagnostic: Begin Test! 07:58 PM Sat 01/02/2016 192.64.170.15 Game Servers (ORD1): Tracing route to 192.64.170.15 over a maximum of 20 hops 1 1 ms 7 ms 2 ms 192.168.0.1 2 10 ms 13 ms 13 ms 10.50.128.1 3 10 ms 11 ms 14 ms wsip-70-182-122-10.ks.ks.cox.net [70.182.122.10] 4 10 ms 17 ms 8 ms wsip-70-182-122-46.ks.ks.cox.net [70.182.122.46] 5 * * * Request timed out. 6 23 ms 29 ms 27 ms 70.183.71.84 7 31 ms 30 ms 32 ms chgobprj01-ae0.0.rd.ch.cox.net [68.1.4.42] 8 32 ms 29 ms 30 ms ip70-167-150-114.at.at.cox.net [70.167.150.114] 9 72 ms 29 ms 28 ms 104.160.131.44 10 30 ms 31 ms 30 ms 104.160.131.101 11 * * * Request timed out. 12 * * * Request timed out. 13 * * * Request timed out. 14 * * * Request timed out. 15 * * * Request timed out. 16 * * * Request timed out. 17 * * * Request timed out. 18 * * * Request timed out. 19 * * * Request timed out. 20 * * * Request timed out. Trace complete. 192.64.173.40 Game Servers (ORD1): Tracing route to 192.64.173.40 over a maximum of 20 hops 1 1 ms 1 ms 1 ms 192.168.0.1 2 * * * Request timed out. 3 * * * Request timed out. 4 * * 10 ms wsip-70-182-122-46.ks.ks.cox.net [70.182.122.46] 5 * * * Request timed out. 6 * * * Request timed out. 7 * * * Request timed out. 8 32 ms 30 ms 31 ms ip70-167-150-114.at.at.cox.net [70.167.150.114] 9 42 ms 30 ms 29 ms 104.160.131.46 10 * * * Request timed out. 11 * * * Request timed out. 12 * * * Request timed out. 13 * * * Request timed out. 14 * * * Request timed out. 15 * * * Request timed out. 16 * * * Request timed out. 17 * * * Request timed out. 18 * * * Request timed out. 19 * * * Request timed out. 20 * * * Request timed out. Trace complete. 104.60.131.4 Chiacgo (ORD1): Tracing route to 104.160.131.4 over a maximum of 20 hops 1 4 ms 3 ms 1 ms 192.168.0.1 2 * * * Request timed out. 3 * * * Request timed out. 4 * * * Request timed out. 5 * * * Request timed out. 6 * * 28 ms 70.183.71.84 7 35 ms 33 ms 33 ms chgobprj01-ae0.0.rd.ch.cox.net [68.1.4.42] 8 * * * Request timed out. 9 * * * Request timed out. 10 * * * Request timed out. 11 30 ms 34 ms 34 ms 104.160.131.4 Trace complete. Google: Pinging 8.8.8.8 with 32 bytes of data: Request timed out. Request timed out. Reply from 8.8.8.8: bytes=32 time=37ms TTL=53 Reply from 8.8.8.8: bytes=32 time=31ms TTL=53 Ping statistics for 8.8.8.8: Packets: Sent = 4, Received = 2, Lost = 2 (50% loss), Approximate round trip times in milli-seconds: Minimum = 31ms, Maximum = 37ms, Average = 34ms Tracing route to google-public-dns-a.google.com [8.8.8.8] over a maximum of 20 hops: 1 1 ms 1 ms 1 ms 192.168.0.1 2 * * * Request timed out. 3 * * 10 ms wsip-70-182-122-10.ks.ks.cox.net [70.182.122.10] 4 10 ms 12 ms 23 ms wsip-70-182-122-46.ks.ks.cox.net [70.182.122.46] 5 * * * Request timed out. 6 19 ms 21 ms 23 ms 70.183.71.84 7 * 31 ms 32 ms dalsbprj01-ae1.0.rd.dl.cox.net [68.1.2.109] 8 35 ms 31 ms 33 ms 72.14.212.233 9 * * * Request timed out. 10 * * * Request timed out. 11 * * * Request timed out. 12 * * * Request timed out. 13 31 ms 30 ms 42 ms google-public-dns-a.google.com [8.8.8.8] Trace complete. Local Network Info: Windows IP Configuration Host Name . . . . . . . . . . . . : HoodedDemon Primary Dns Suffix . . . . . . . : Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No Ethernet adapter Ethernet: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Realtek PCIe FE Family Controller Physical Address. . . . . . . . . : 00-8C-FA-A9-F5-A9 DHCP Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes Wireless LAN adapter Local Area Connection* 2: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Microsoft Wi-Fi Direct Virtual Adapter Physical Address. . . . . . . . . : 66-5A-04-0A-09-3F DHCP Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes Wireless LAN adapter Wi-Fi: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Realtek RTL8188EE Wireless LAN 802.11n PCI-E NIC Physical Address. . . . . . . . . : 64-5A-04-0A-09-3F DHCP Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes Link-local IPv6 Address . . . . . : fe80::104b:e570:b87d:fcd%8(Preferred) IPv4 Address. . . . . . . . . . . : 192.168.0.11(Preferred) Subnet Mask . . . . . . . . . . . : 255.255.255.0 Lease Obtained. . . . . . . . . . : Saturday, January 2, 2016 7:56:55 PM Lease Expires . . . . . . . . . . : Saturday, January 2, 2016 8:56:55 PM Default Gateway . . . . . . . . . : 192.168.0.1 DHCP Server . . . . . . . . . . . : 192.168.0.1 DHCPv6 IAID . . . . . . . . . . . : 73685508 DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1A-8B-BC-90-00-8C-FA-A9-F5-A9 DNS Servers . . . . . . . . . . . : 68.105.28.11 68.105.29.11 68.105.28.12 NetBIOS over Tcpip. . . . . . . . : Enabled Tunnel adapter Teredo Tunneling Pseudo-Interface: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes IPv6 Address. . . . . . . . . . . : 2001:0:5ef5:79fb:2cc0:3ba4:b722:c27a(Preferred) Link-local IPv6 Address . . . . . : fe80::2cc0:3ba4:b722:c27a%4(Preferred) Default Gateway . . . . . . . . . : :: DHCPv6 IAID . . . . . . . . . . . : 335544320 DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1A-8B-BC-90-00-8C-FA-A9-F5-A9 NetBIOS over Tcpip. . . . . . . . : Disabled Tunnel adapter isatap.{6A43BEC1-5D47-48F6-B56C-9518EF28AD38}: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2 Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes Test Complete! 08:03 PM Sat 01/02/2016Solved7.4KViews0likes19Comments
Update From Last Question
Yes, I'm still posting for my mother because she doesn't really know the technical side of computers. The service guy who came to our house told us that there were too many houses connected to the node and that Cox won't do anything until at least the first of the year. Okay, no problem. Alas, since the guy came out (all he did was switch out our cable box with a DVR capable one), we've been lucky to reach about 10 Mbps download and upload. This test was with the cox speed test: Mon Dec 21 11:28 PM Yes 8 Mbps 12 Mbps 26 millisec 72.221.61.133 Oklahoma City I understand it's "up to 100 Mbps" download, but when we're not even getting "up to 50 Mbps" I personally think we shouldn't have to pay the full amount. Right now we have the DPQ3925 gateway. Is there something better? Which modem and router do you guys recommend? If our speeds don't improve when they fix the node, I'm going to try to convince my parents to buy a modem and router.Solved3.2KViews0likes6CommentsNot getting enough internet speed
Good afternoon; Considering my mother isn't as good enough with computers and internet as I am, she allowed me to make her forum account for her. We just moved to our new home last Friday (Nov 20), but have had internet/tv/phone since last Wednesday (Nov 18). During the day, our internet speeds are around 1/5 of the speeds we're paying for (up to 100 Mbps). At night however, we get anywhere from 5Mbps to around 40Mbps. I understand the speed we pay for, Premier, is "up to 100Mbps," but if we're getting Preferred, "up to 50Mbps," speeds, we might need to get downgraded. We had figured with three people using the internet and all of us playing games that require internet access, Premier would be best for us. Sadly, if we're not getting more than Preferred speeds, we shouldn't have to pay for Premier. We don't have the money right now to buy our own modem and router, or else we would. What could we do, without spending any extra money (because we just moved), to get the speeds we're paying for. My speed tests: (only person using internet is me, plugged directly into the modem DPQ3925) http://testmy.net/quickstats/HoodedDemonSolved4.2KViews0likes13Comments
Can I Connect An External Hard Drive to 3925? How?
I have an older router that I planned to use with my new Cox connection so I could do back ups of my laptop and possibly access pictures/video/music but I went with the All In One solution and I didn't ask the tech about adding an external HD. There are 4 Ethernet ports so I am guessing it may be possible and maybe even possible to access pics, etc. via my TV but while I understand the concept I am no techie so if you do have a way be as specific "For Dummies" as possible. While it is highly unlikely to happen at my age I will consider naming any first born after you if I get the whole nine yards. [Insert annoying emoticon here.] Thank you. RD2.1KViews0likes1CommentWireless router antenna pattern (DPQ3925)
I have the Cisco DPQ3925 router/gateway and noticed that the wireless coverage in my townhouse varies considerably. Does anyone have an idea how the built-in antennae are oriented and what the shape of the covered space is? It seems that the signal at the top is much stronger that at the bottom. Could anyone confirm? Thanks.Solved5.6KViews0likes5Comments