Should I worry

Post new topic   Reply to topic    DD-WRT Forum Index -> X86 based Hardware
Author Message
32dave
DD-WRT User


Joined: 27 Oct 2009
Posts: 70
Location: Woodstock,Ontario

PostPosted: Sun Jan 28, 2024 20:23    Post subject: Should I worry Reply with quote
Since Oct 31 build r53833 I get random reboots once maybe twice a day. I turned on SYSLOG to see whats is going on unfortunately when it reboots its a crash so it doesn't catch anything, but I did noticed some attacking going on I took screen shots which I have attached. Should I worry or its doing its job ?
Hardware: Dell Optiplex 790 Intel(R) Core(TM) i5-2400 CPU 4GIGs of ram two quad port intel NICs and one onboard NIC
Sponsor
Per Yngve Berg
DD-WRT Guru


Joined: 13 Aug 2013
Posts: 6870
Location: Romerike, Norway

PostPosted: Sun Jan 28, 2024 22:20    Post subject: Reply with quote
Have you exposed SSH to the WAN?

Someone is trying to connect. Turn off Password Authentication and don't worry about it. If you don't need SSH access from WAN, turn it off.
32dave
DD-WRT User


Joined: 27 Oct 2009
Posts: 70
Location: Woodstock,Ontario

PostPosted: Mon Jan 29, 2024 0:06    Post subject: Reply with quote
Ok thanks I shut it all off
dale_gribble39
DD-WRT Guru


Joined: 11 Jun 2022
Posts: 1958

PostPosted: Mon Jan 29, 2024 3:49    Post subject: Reply with quote
Rebind attacks are from rogue clients. Some apps or websites must be trying to phone home.
_________________
"The woods are lovely, dark and deep,
But I have promises to keep,
And miles to go before I sleep,
And miles to go before I sleep." - Robert Frost

"I am one of the noticeable ones - notice me" - Dale Frances McKenzie Bozzio

<fact>code knows no gender</fact>

This is me, knowing I've ruffled your feathers, and not giving a ****
Some people are still hard-headed.

--------------------------------------
Mac Pro (Mid 2012) - Two 2.4GHz 6-Core Intel Xeon E5645 processors 64GB 1333MHz DDR3 ECC SDRAM OpenSUSE Leap 15.5
32dave
DD-WRT User


Joined: 27 Oct 2009
Posts: 70
Location: Woodstock,Ontario

PostPosted: Mon Jan 29, 2024 8:21    Post subject: Reply with quote
Ok so nothing I can do about that I guess
Alozaros
DD-WRT Guru


Joined: 16 Nov 2015
Posts: 6447
Location: UK, London, just across the river..

PostPosted: Mon Jan 29, 2024 8:53    Post subject: Reply with quote
At least update to a newer build as it contains some security fixes regarding the dropbear and some other services... Laughing
_________________
Atheros
TP-Link WR740Nv1 ---DD-WRT 55630 WAP
TP-Link WR1043NDv2 -DD-WRT 55723 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear XR500 --DD-WRT 55779 Gateway/DoH,Forced DNS,AP Isolation,4VLAN,Ad-Block,Firewall,Vanilla
Netgear R7800 --DD-WRT 55819 Gateway/DoT,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla
Netgear R9000 --DD-WRT 55779 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Broadcom
Netgear R7000 --DD-WRT 55460 Gateway/SmartDNS/DoH,AD-Block,Firewall,Forced DNS,x3VLAN,VPN
NOT USING 5Ghz ANYWHERE
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913
32dave
DD-WRT User


Joined: 27 Oct 2009
Posts: 70
Location: Woodstock,Ontario

PostPosted: Mon Jan 29, 2024 9:10    Post subject: Reply with quote
I'm running the latest 55009 as of this post
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12917
Location: Netherlands

PostPosted: Mon Jan 29, 2024 11:06    Post subject: Reply with quote
The rebind attacks are not the ones to worry about but better not expose SSH on your WAN see @Per Yngve Berg's answer.

If you want to connect from outside use WireGuard

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> X86 based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum