Reply

IP Address range blocking on Orbi CBR40?

phands
Aspirant

IP Address range blocking on Orbi CBR40?

Hi, fellow Orbi-ers,

 

I was looking at system logs on my Linux machine, which is connected to an Orbi CBR40 router via wifi or ethernet cable, and I see many, many connection attempts from an IP address that turns out to be from China...

 

inetnum:        222.184.0.0  -  222.191.255.255
netname:        CHINANET-JS
descr:          CHINANET  jiangsu  province  network

 

Which is bombarding my network with hundreds of login attempts, like this....

 

14:51 PAM service(sshd) ignoring max retries; 5 > 3 sshd
14:51 error: maximum authentication attempts exceeded for root from 222.186.175.182 port 44942 ssh2 [preauth]
 
This traffic is getting through the Orbi, and is hitting other devices on my home network, so I want to stop it at the router, rather than blocking individually on 16 devices.
Because the Cable modem is built in, I can't interpose another device between it and the home wifi/wired network, and I can't see how to set up traffic blocking using an IP address or address range.  I'd like to block the entire 222.184.x.x to 222.191.x.x range, not using the DNS names...is this possible on the Orbi?  If so, how?
 
Orbi is at Firmware Version V2.3.5.12_1.0.8
 
Thanks,
 
Paul

 

 

Model: CBR40|Orbi AC2200 Tri-band WiFi Cable Modem Router
Message 1 of 2
FURRYe38
Guru

Re: IP Address range blocking on Orbi CBR40?

I would contact your ISP and have them change the WAN IP address going to the CBR40...


@phands wrote:

Hi, fellow Orbi-ers,

 

I was looking at system logs on my Linux machine, which is connected to an Orbi CBR40 router via wifi or ethernet cable, and I see many, many connection attempts from an IP address that turns out to be from China...

 

inetnum:        222.184.0.0  -  222.191.255.255
netname:        CHINANET-JS
descr:          CHINANET  jiangsu  province  network

 

Which is bombarding my network with hundreds of login attempts, like this....

 

14:51 PAM service(sshd) ignoring max retries; 5 > 3 sshd
14:51 error: maximum authentication attempts exceeded for root from 222.186.175.182 port 44942 ssh2 [preauth]
 
This traffic is getting through the Orbi, and is hitting other devices on my home network, so I want to stop it at the router, rather than blocking individually on 16 devices.
Because the Cable modem is built in, I can't interpose another device between it and the home wifi/wired network, and I can't see how to set up traffic blocking using an IP address or address range.  I'd like to block the entire 222.184.x.x to 222.191.x.x range, not using the DNS names...is this possible on the Orbi?  If so, how?
 
Orbi is at Firmware Version V2.3.5.12_1.0.8
 
Thanks,
 
Paul

 

 


 

My Setup Internet Cable 1000↓/50↑ CAX80 Mode Mode | ISP SparkLight | Wifi Router Orbi RBK853 v4.6.7.5(Router Mode), Wired BackhaulSwitches Netgear GS105/8 | 

Additional NG HW: C7800/CM1100/CM1200/CM2000, Orbi CBK40, CBR750, RBK953(v6.0.3.68) & XR450(v130), RBK853 v4.6.7.5(AP) & RBK752 v4.6.7.5, RBK50(v23), SXK30(v110), R7000(v34), R7800(v84), R7960P(v84), EX7500/EX7700, GS308v3 and WNHDE111


 


 


Testing

Message 2 of 2
Top Contributors
Discussion stats
  • 1 reply
  • 606 views
  • 0 kudos
  • 2 in conversation
Announcements

Orbi WiFi 6E