October 1, 20214 yr I have two UNRAID servers and they are both getting the "Possible Hack Attempt" warnings in Fix Common Problems. The router is a Netgear Orbi router. I have DMZ disabled and I am forwarding port 51820 to one of the servers for Wireguard. I'm really not sure how they are getting to my servers. Particularly the server that is not using port forwarding at all in the router. If you look at the syslogs they show many attempts (usually messages have 142 or so attempts) using different logins and ports. How can I fix this? I have attached the diagnostic files from both computers. tower-diagnostics-20211001-0949.zip myunraid-diagnostics-20211001-1451.zip
October 1, 20214 yr Your router is "helping" you by repeatedly trying to hack in to all connected devices, ostensibly in the name of alerting you to devices with weak security. https://community.netgear.com/t5/NETGEAR-Armor/Armor-vulnerability-scan-triggers-temporary-blacklisting-on-my/td-p/1982465
October 1, 20214 yr Author Ah yes! It makes perfect sense now with the different device vulnerability scan messages I get from the Orbi. Thanks JonathanM! I'll sleep better now.
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.