smick Posted October 1, 2021 Share Posted October 1, 2021 I have two UNRAID servers and they are both getting the "Possible Hack Attempt" warnings in Fix Common Problems. The router is a Netgear Orbi router. I have DMZ disabled and I am forwarding port 51820 to one of the servers for Wireguard. I'm really not sure how they are getting to my servers. Particularly the server that is not using port forwarding at all in the router. If you look at the syslogs they show many attempts (usually messages have 142 or so attempts) using different logins and ports. How can I fix this? I have attached the diagnostic files from both computers. tower-diagnostics-20211001-0949.zip myunraid-diagnostics-20211001-1451.zip Quote Link to comment
JonathanM Posted October 1, 2021 Share Posted October 1, 2021 Your router is "helping" you by repeatedly trying to hack in to all connected devices, ostensibly in the name of alerting you to devices with weak security. https://community.netgear.com/t5/NETGEAR-Armor/Armor-vulnerability-scan-triggers-temporary-blacklisting-on-my/td-p/1982465 Quote Link to comment
smick Posted October 1, 2021 Author Share Posted October 1, 2021 Ah yes! It makes perfect sense now with the different device vulnerability scan messages I get from the Orbi. Thanks JonathanM! I'll sleep better now. Quote Link to comment
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.