NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

vt15's avatar
vt15
Aspirant
Dec 19, 2019

Home security for beginners

Hi,

 

With the default settings on an orbi router I see my PC which is running mcafee firewall is detecting and blocking connection attempts on various tcp ports.


Is there any way to block more connection attempts at the router level?   like port scans etc?

 

Many thanks in advance!

 

7 Replies

  • CrimpOn's avatar
    CrimpOn
    Guru - Experienced User

    My Orbi, set up as a router (the default) logs many internet attacks.  Check the Orbi web interface, Advanced Tab, Administration, Logs.

    Perhaps you can compare the attempts that Orbi logs against the McAfee firewall reports?

    The way I understand things, when the Orbi logs an attempt, that means it did not allow the attempt to penetrate the Orbi system.

     

    Something is "definitely strange" in this situation.

    • vt15's avatar
      vt15
      Aspirant

      Hello,

      Thanks for your reply.

      I compared the orbi logs and there is no entry at this time in those logs.

      So I have events like this coming through to my PC:

      The PC x.x.x.x tried to connect to TCP port 55026 on your PC without your permission

       

      Various IP addresses are listed like:

      49163, 49164, 49166, 49167, 49168, 49169

       

      • CrimpOn's avatar
        CrimpOn
        Guru - Experienced User
        Interesting. Did the report give an actual IP address? (not "x. X. X. X")
        The other numbers do not look like IP addresses. They appear to be TCP port numbers.
  • For some reason my earlier post (post #8) on the previous thread is not appearing after numerous attempts to post it, so I started a new thread.

     

    > CrimpOn said:
    > Are these IP addresses from the LAN or public addresses?

     

    My answer:

    I ignore the LAN attempts but not so happy about the smart TV ones!

     

    Other than that I have several WAN attempts:

     

    52.18.245.183 amazon cloud tcp 65519, 64132

    54.199.212.212 amazon cloud tcp 65514, 64154

    54.64.120.121 tcp port 49163, 49164, 49166, 49167, 49168, 49169

    210.138.249.114 internet initiative japan 64054

    54.71.95.145 tcp port 55026

     

    Just wanted to know how to block these at the router level.
    The above is connection attempt logging from McAfee running on a PC.

    Not sure what my Mac does about them...