This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Persistent Hacking Attempts from Russia, Vietnam, Bulgaria etc...

I'm wondering if there's something I can do to improve security on my UTM.

I' have been bombarded for years but there has been an uptick recently.

I'm also getting traffic from a research organization in Europe called ReCyber which appears to be a security-centric organization perhaps trying to get a handle on all the hacking going on.  I am a home/free user.  Would a paid license improve anything appreciably?

I've taken to blocking inbound traffic  from all countries including the US, so nothing gets in.  My UTM never identifies anything, even if I have a viral infection on my net.

What are other people doing?  I appear to be singled out for some reason... I think.  I wonder if someone noticed improved security on my side and decided to 'really try' to get in.  I'm just guessing. 

Oh yes, my laptop was actually hacked on a trip this year and I did have in on my home network, so I imagine the nefarious folks did get traffic from this network identifying it as a target.  That would probably be it.

Thanks in advance.



This thread was automatically locked due to age.
  • If the UTM is blocking the traffic and dropping it or rejecting it, it's doing its job.  I utilize Country Blocking and reject the traffic.  Just because you are seeing the attempts in your logs doesn't mean you are being hacked, and a lot of these places are port scanning IPs.  You can:

    Report the IP.

    Use Country Blocking and reject packets in UTM.

    If you can, change your ISP IP address.

    Request some help from the ISP (although I doubt they do much, this would be the whack a mole methodology for them).

    OPNSense 64-bit | Intel Xeon 4-core v3 1225 3.20Ghz
    16GB Memory | 500GB SSD HDD | ATT Fiber 1GB
    (Former Sophos UTM Veteran, Former XG Rookie)