• Hello_there@fedia.io
    link
    fedilink
    arrow-up
    12
    arrow-down
    1
    ·
    7 days ago

    I wish the article can discuss in more detail how to do the things it’s suggesting. I’ve looked for a few mins but there’s no easy button to press to block an IP or check for ssh connections Anyone point me to where to look in Asus settings?

    • Ecco the dolphin@lemmy.ml
      link
      fedilink
      English
      arrow-up
      4
      ·
      6 days ago

      On my Asus router, the relevent SSH screen is under Administration -> System and looks like this:

      My router wasn’t compromised. If it was, ssh would be set to yes, and the sus key/port would be visible here. Please forgive the ultra paranoid purple boxes.

      As far as IP blocking, I’m not sure it’s necessary, but I followed this link. It’s pretty easy to get new IPs, so if the attacker wanted to, they would do that. It’s more important to update your router.

    • bitchkat@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      ·
      6 days ago

      On my router. Adminstration (left menu) -> System (tab) -> Service (section in the page).

      If ssh is on and there is a key specified, then you were hacked. Disable ssh (toggle) and remove the key (no idea because mine was off)

      And they don’t mention this, upgrade your firmware if its out of date.

    • ewigkaiwelo@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      6 days ago

      Maybe see if you router is supported by Openwrt and if so install it and then run an iptable to block those ip’s? But I’ll also wait for an answer/recommendation from an expert