Quantcast
Channel: HomeSeer Message Board
Viewing all articles
Browse latest Browse all 4847

Hacking intrusion into system

$
0
0
This is a first for me. Over the course of an hour, I received a bunch of client connects and then disconnects on HSTouch over various ports from 188.130.150.3 (which a reverse DNS doesn't show anything about).

I can't figure out these ports specifically. None correspond to the port that HSTouch uses. None are opened on my router. I did recently enable UPNP for an HS3-unrelated reason (and which I'll be closing once I get all the port-forwarding rules in place) on my router, but HS3 still does not use UPNP (and there are no UPNP-added rules in the router, which is a Linksys dual-WAN router).

My ISP is Comcast, with which I'm fairly new -- I've noticed that my router drops attempted SYN floods a couple of times a week, which is something I never encountered before. It's a dynamic IP, also something I've not done in the past.

What stopped the connections -- and which could be totally coincidental -- is that while I was watching them pop up in the log, I went in and disabled JSON remote access on HS3, which is something I don't use. The connections stopped.

Any thoughts?

Attached Images
 

Viewing all articles
Browse latest Browse all 4847

Trending Articles