- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
Re: Question about Attack Warning
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Question about Attack Warning
I received an "Attack" message from NETGEAR "Armor detected that a suspicious remote location 188.240.13.2 attempted a connection to Pixel-7-Pro and blocked that connection. We will keep an eye on this device for you. You're protected and don't need to do anything else"
Is this common or something I need to do more about?
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
"Attack" Message
Looking for an opinion on an "Attack" message I received: "NETGEAR Armor detected that a suspicious remote location 188.240.13.2 attempted a connection to Pixel-7-Pro and blocked that connection. We will keep an eye on the this device for you. You're protected and don't need to do anything." I was concerned because it is an attack on a specific device and the message alerted 4 to 5 times and on different days.
Has anyone received this message or know if this is something to worry further about?
Thanks,
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Question about Attack Warning
Just Armor letting you know that it's doing it's job.
Can do a Whois look up on that IP address to see where that is coming from if you like.
Otherwise, normal to get notices from Armor about items it blocks.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Question about Attack Warning
Do you think it is odd that it was tied to a specific device such as my phone?
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Question about Attack Warning
No. Could be picked up on any or maybe some targeted attempt.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Question about Attack Warning
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: "Attack" Message
IP shows from this company:
inetnum: 188.240.13.0 - 188.240.13.255
netname: NL-DATAWEBGLOBALGROUP-20090623
country: NL
https://datawebgroup.com
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Question about Attack Warning
Hey, I'm having the same issue.
“NETGEAR Armor detected that a suspicious location 151.101.1.91 attempted a connection to [device here] and blocked that connection.”
It's always the same IP. The IP is owned by a company called Fastly, and they can't figure out what's going on.
Is there anything I can do or should be doing about this?
Thank you.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Question about Attack Warning
One resource that may be helpful when investigating suspicious IP addresses is the Abuse IP Database service.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Question about Attack Warning
Ah, so likely something not to worry about then. Okay, great. Thank you!
• Introducing NETGEAR WiFi 7 Orbi 770 Series and Nighthawk RS300
• What is the difference between WiFi 6 and WiFi 7?
• Yes! WiFi 7 is backwards compatible with other Wifi devices? Learn more