NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
donawalt
Jul 08, 2023Mentor - Experienced User
Any need to beef up my security for this?
Hi all, I noticed in my router log this week for the first time, "Remote login failure". I only had about 5 of them for the week. Here is a sample, the IP addresses are all different countries - Mace...
- Jul 09, 2023
Ok Thanks.
F_V
Jul 08, 2023Luminary
I have one piece of security advice. DO NOT allow router admin page access from the WAN side. In other words, only allow logins from a device that is already associated with your LAN. If you allow outside access, the router is going to get hammered 24/7/365. If you are seeing login failures that you can't explain from within your network, it's already too late 🙂
That example IP you pasted has been very very busy, port scans, all sorts of random connection attempts going back months.
donawalt
Jul 08, 2023Mentor - Experienced User
Thanks F_V for the tip. Question for you though, how do I prevent router admin page access from the WAN side? Since the router admin page has an internal IP address, don't I have to explicitly map that thorough? Or does this mean turn off Anywhere Access in the Orbi app?
Thanks!
- FURRYe38Jul 08, 2023Guru - Experienced User
FYI, NG removed WAN side support for access to the RBRs web page about two years ago.
- F_VJul 08, 2023Luminary
Eep! So maybe you're running VERY old firmware that still allows WAN side access? What Orbi Model and firmware version are you running? If Netgear disabled WAN side access, not sure how would someone get a "remote" login failure to the Orbi admin pages from a public IP.
- FURRYe38Jul 08, 2023Guru - Experienced User
He's not.
Probably just an attempt on his WAN side that someones maybe try to gain access and can't and the system is just reporting it. Seen lots of these over the years. Not much we can do about them. Just the system reporting what it see's and is blocking is all.