attack

Just seen this article on Bleeping Computer and wondered if any of yawl have seen it? https://www.bleepingcomputer.com/news/security/cloudflare-sees-surge-in-hyper-volumetric-http-ddos-attacks/

Hi, Some details: 1. Asus stock firmware 3.0.0.4.382_52272 2. Embeded openvpn server 3. Firewall and dos-protection are enabled Issue: In recent weeks the issues randomly happen with the VPN server - new clients can't connect to it. Router still works. Every time before this case the router...

Greetings. I have been seeing some strange listings in my General SysLog. I added line feeds & emphasis to make it clearer to read. I think what's happening is the actual user name (replaced by _USERNAME_ below) may be compromised. I can't tell from this if the password is also compromised or is...

I get dozens of these messages in my AC68U router log every day. I don't really understand what they mean. Is there a router setting I can apply to block this entire domain or at least these sites from screwing with my DNS? Dec 20 00:45:10 dnsmasq[206]: possible DNS-rebind attack detected...

Source: https://hashcat.net/forum/thread-7717.html Clientless improvement to brute force, offline dictionary attacks on WPA/WPA2 PSK (Pre-Shared Key) passwords. Begin Quote This attack was discovered accidentally while looking for new ways to attack the new WPA3 security standard. WPA3 will...

Hi, ASUS RT-AC87U WRT-Merlin 384.5 These "attacks" keep happening, I don't really know what they are trying to accomplish, and I have no idea what do about it. Please see the images. Any advice from people who understand this stiff is welcomed, Thanks for your time :-) These are my...

Recently I've known about such util as psad which serves for analyzing iptables logs and detection/prevention of intrusions and suspicious activity in realtime. Is it worth it to install it locally on router as an security solution and have anybody ever had such experience? Just out of...

Hi guys, I don't know if this is the right place to post this experience, but I'm running the latest stable Merlin firmware (380.64) and yesterday, during the new year eve, I discovered someone managed to access to my router, both with SSH and webUI. Here are the involved lines on syslog...