Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Netcore inbound Hacks Attempt

    Scheduled Pinned Locked Moved IDS/IPS
    6 Posts 4 Posters 1.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • G Offline
      ghkrauss
      last edited by

      I am noticing a blizzard of Netcore Router hack attacks that have been flagged by Suricata. Never seen this many in the past. Anyone else seeing this situation?

      1 Reply Last reply Reply Quote 0
      • F Offline
        fsansfil
        last edited by

        Suricata is "just" an engine. W/o rules there isnt much going on ;)

        Post a couple of those packets and we could write a rule to block it.

        Cheers.

        F.

        1 Reply Last reply Reply Quote 0
        • S Offline
          simby
          last edited by

          I have many this alert  (5-10 1/h)

          1 Reply Last reply Reply Quote 0
          • P Offline
            Paint
            last edited by

            I am getting the same on my network. Nothing you need to be concerned with.

            If you are concerned, put a WAN rule to block UDP traffic from port 53413

            pfSense i5-4590
            940/880 mbit Fiber Internet from FiOS
            BROCADE ICX6450 48Port L3-Managed Switch w/4x 10GB ports
            Netgear R8000 AP (DD-WRT)

            1 Reply Last reply Reply Quote 0
            • G Offline
              ghkrauss
              last edited by

              Thanks to everyone for the update. The hacks just came out of the blue!

              1 Reply Last reply Reply Quote 0
              • P Offline
                Paint
                last edited by

                All of the IPs that are scanning for this port are mainly in China and South America…..

                pfSense i5-4590
                940/880 mbit Fiber Internet from FiOS
                BROCADE ICX6450 48Port L3-Managed Switch w/4x 10GB ports
                Netgear R8000 AP (DD-WRT)

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.