NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Am I getting hacked?
Hello, Today I saw strange logs on ma Orbi: [LAN access from remote] from 217.153.58.129 port 20396 to 10.0.0.41 port 8123 Wednesday, Feb 21,2024 20:25:12 [LAN access from remote] from 217.153....
Thank you for quick reply. My router is RBR750 and the firmware is V4.6.14.3_2.3.12 and it shows that no new firmware is available. I also have Netgear Armor subscription. I got notification that there was a DoS attack attempt on my iPhone as well.
Thank you. Does it mean I could get hacked? Why I didn't get info that no new firmware is available on my orbi dashboard?
Should I change all my passwords? What can I do after updating router?
I've checked that one of the adresess is from my internet provider, the other one is from my country but it shows that it's T-Mobile
01dav wrote:
Thank you. Does it mean I could get hacked? No.
Why I didn't get info that no new firmware is available on my orbi dashboard?
NG doesn't auto update systems anymore unless it's some major version of FW or users allow the system to update. NG put in the ability to disable auto updates. So users have control now. So if you don't see it, and something is on the download site or mentioned here in the forums, user can manually update, if they wish too.
Should I change all my passwords? What can I do after updating router?
Up to you, was an attempt is all, wasn't successful.
Do you have a ISP service from T-Mobile?
What ISP brand and model modem do you have connected to the Orbi system?I've checked that one of the adresess is from my internet provider, the other one is from my country but it shows that it's T-Mobile
Are you by chance connected to this T-Mobile service with a phone or pad to the system?
Now everything is clear to me. So at this time I connected to my company VPN which has two internet providers, one of them is T-Mobile and both of IP adresses are from my company office.
Today I saw on my logs something like this:
[DoS attack: DoSPortScan] from source 10.0.0.18, port 62090
It's internal IP of my iPhone 14 Pro - mobile has the newest update. Is it something I should be concerned?