NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Nighthawk Armor detected & blocked exploit an exploit attack on LT SECURITY camera from.....
Hello, Hoping someone can help me understand the multiple notifications I get on a daily basis from Netgear Armor Security running on my router. Network Attack Blocked: NETGEAR Armor has detected a...
Hello Razor512 ,
Appreciate you answering and shedding some info on my situation.
I only access my security camera network via it's app (LTS Connect) installed on my iPhone. But after reading your response I confirmed it's accessible via its external IP address (Web UI) and a login page for the camera NVR ( I am not using a default PW ) comes up. I guess that explains the constant notifications from Netgear Armor stating threats were blocked.
Do these bots only target security cameras? Should I be concerned with other devices within my home network? (Ring Doorbell, Nest Cams?)
Would you kindly help me understand how to set the Web UI not to be visible via my WAN IP address and how to leverage the routers VPN to access my cameras? or how to use the service blocking function of the RAXE500's we UI to disable access to those ports that the web UI is hosted on?
My apologies in advance for the naive questions.
Thank you
On the RAXE500, if a specific device does not allow you to disable its web UI, or if it is using UPnP to forward the web UI port, and offers no way to turn it off, then service blocking will be your only option.
To make the most effective use of it, first make sure the NVR has a static LAN IP. You can do that by:
- Go to the Advanced tab.
- Go to Setup.
- Go to LAN Setup.
- Scroll down to the "Address Reservation" section.
- Click on "Add".
- Select your NVR from the list.
- Click on the "Add" button near the top of the page.
If possible make note of which IP the NVR is using.
The above will allow you to more reliably do service blocking.
To do the service blocking:
- While in the Advanced tab, click on "Security".
- Click on "Block Services".
- Click on "Add".
- Set the start and ending port to 80.
- Under the "Filter Services For" section, select "Only This IP Address".
- Under "Service Type/User Defined" give it any name you want.
- Type in the last 3 digits for the LAN IP of the NVR.
- Click on the "Add" button on the bottom of the page.
- Click on Apply.
If the NVR is aet to also allow web UI access via HTTPS, then repeat steps 3 to 9 but using port 443 instead of 80.
If you are unsure which port it is using, or if other devices are forwarding ports for their web UIs, you can also check the following section.
Advanced tab> Advanced Setup> UPnP. and see which ports the NVR is having forwarded. Ignore any ports related to what would be needed for the mobile app to function, as blocking them will prevent the app working remotely.
For your NVR, page 37 of the user manual http://www.ltsecurityinc.com/amfilerating/file/download/file_id/1937/ mentions one UPnP setting, if it also handles the port forward related to the web UI, if it does, then that may allow you to disable WAN access to the web UI without the need for the service blocking function.