I have done some basic things protect my router like disabling wps setting strong passwords and stuff. However, I am using a virgin media superhub 2 where it does not seem to be possible to ssh into it so I can only use the web interface which has very limited settings. e.g. the firewall setting options offered are only low, medium or high and it seems like there is no way to block specific IP addresses. That is very frustrating. Especially as it is also impossible to report the problem using their dedicated online form because it does not accept the IP addresses I input as being valid, when they are.
It seems pretty likely that at best these attacks are slowing my connection and at worst I worry that they might sometimes be successful in compromising my router. Sometimes I have had warnings from google that my IP is making too many requests, which is a worry.
Ideally I would like to block the IP addresses making attacks on my router by sshing into my router but since there seems no way to do this I have been scratching my head, for a while.
It would really help to get some advice on what I might do to protect my router better than I seem to be able to do this without ssh access. One thing I have been considering is putting it into modem mode so I can use a different router and ssh into that but I am worried that this might slow my wifi connection or something. Other than that I am not sure.
Anyway, the most common types of attacks seem to be the following:
- SYN Flood
- ICMP Flood
- TCP- or UDP-based Port Scan (some of these seem to be from my ISP but some do not seem this way)