Router Security
Router Security
I have been observing some irregularities with my router over the past two weeks. I decided to review the network logs to understand what might be causing the instability, especially since I’m forwarding certain ports for services like Nextcloud and a Minecraft server. I’m familiar with the potential dangers of port forwarding and checked the router logs, which revealed someone was accessing my Nextcloud server from various ports remotely. While I don’t think they successfully gained access, I wondered if it’s possible to temporarily disable network connectivity or if there’s any form of remote intrusion. I haven’t encountered any specific attacks matching my symptoms. Currently, I’ve stopped using the cloud server and turned off the affected port on my forwarding settings. The issue has stopped occurring for about half an hour, though it still happens every few minutes.
The router seems to be malfunctioning because it keeps trying to connect repeatedly.
You're wondering if someone is trying to connect to my server. It seems like only a few ports are open, and the last time someone accessed it remotely was at 11 AM with the message "Lan accessed remotely." The random restarts you experienced were around 1 to 2:10 PM.
You're dealing with a tricky setup issue. The logs show your router is responding to your server's IP, but there might be a mismatch or misconfiguration. After powering up, the router soft restarted, which could have reset settings. Check if the port you're seeing is active and ensure your server is correctly assigned an IP address. If the issue persists, consider verifying the network settings on both devices.
You can review the Netgear logs to see if traffic from your IP appears outside your local network. The DoS attack alert indicates a potential scanning activity targeting your device, likely related to exploiting vulnerabilities. After updating firmware, ensure your Nextcloud server is properly secured and consider blocking suspicious IPs.
I use my AT router in pass-through mode connected to a Netgear router, but I’m not sure it’s a problem since neither device appears in DMZ.