• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Netcore inbound Hacks Attempt

Scheduled Pinned Locked Moved IDS/IPS
6 Posts 4 Posters 1.4k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • G
    ghkrauss
    last edited by Jul 26, 2016, 12:37 PM

    I am noticing a blizzard of Netcore Router hack attacks that have been flagged by Suricata. Never seen this many in the past. Anyone else seeing this situation?

    1 Reply Last reply Reply Quote 0
    • F
      fsansfil
      last edited by Jul 27, 2016, 11:11 PM

      Suricata is "just" an engine. W/o rules there isnt much going on ;)

      Post a couple of those packets and we could write a rule to block it.

      Cheers.

      F.

      1 Reply Last reply Reply Quote 0
      • S
        simby
        last edited by Jul 29, 2016, 5:53 AM

        I have many this alert  (5-10 1/h)

        1 Reply Last reply Reply Quote 0
        • P
          Paint
          last edited by Jul 29, 2016, 1:48 PM Jul 29, 2016, 1:36 PM

          I am getting the same on my network. Nothing you need to be concerned with.

          If you are concerned, put a WAN rule to block UDP traffic from port 53413

          pfSense i5-4590
          940/880 mbit Fiber Internet from FiOS
          BROCADE ICX6450 48Port L3-Managed Switch w/4x 10GB ports
          Netgear R8000 AP (DD-WRT)

          1 Reply Last reply Reply Quote 0
          • G
            ghkrauss
            last edited by Aug 1, 2016, 9:34 PM

            Thanks to everyone for the update. The hacks just came out of the blue!

            1 Reply Last reply Reply Quote 0
            • P
              Paint
              last edited by Aug 1, 2016, 9:35 PM

              All of the IPs that are scanning for this port are mainly in China and South America…..

              pfSense i5-4590
              940/880 mbit Fiber Internet from FiOS
              BROCADE ICX6450 48Port L3-Managed Switch w/4x 10GB ports
              Netgear R8000 AP (DD-WRT)

              1 Reply Last reply Reply Quote 0
              6 out of 6
              • First post
                6/6
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                This community forum collects and processes your personal information.
                consent.not_received