AI Protection Hits

[sol1109]

Hello, I am getting many hits on AI Protection under "Two Way IPS" as shown in the attached screenshot. These come in groups separated by several days. The weird thing is the source IP and the destination name are the same PC. I have looked into the reported CVE but I am not familiar with Apache servers or where to find the program on my windows 10 PC that is responsible so I can look into any required updates. I am not running an Apache web server that I know of.

 

[hotsauce2007]

torrent?

 

[mogulman]

Look in task manager for any tasks that look unusual. Run Malwarebytes. Also look in task manager for any startup items that look unusual.

Look in Services to see if there are any unusual services running

 

[sol1109]

torrent?

I do not intentionally run any torrent programs. I do run BOINC which I know will perform background data exchanges.

 

[sol1109]

Look in task manager for any tasks that look unusual. Run Malwarebytes. Also look in task manager for any startup items that look unusual.

Look in Services to see if there are any unusual services running

Malwarebytes come back clean. Startup and tasks look OK.

 

[fearz]

Hello, I am getting many hits on AI Protection under "Two Way IPS" as shown in the attached screenshot. These come in groups separated by several days. The weird thing is the source IP and the destination name are the same PC. I have looked into the reported CVE but I am not familiar with Apache servers or where to find the program on my windows 10 PC that is responsible so I can look into any required updates. I am not running an Apache web server that I know of.

From where did you capture this screenshot? (Where in the router page?)


Sent from my iPhone using Tapatalk

 

[sol1109]

From where did you capture this screenshot? (Where in the router page?)


Sent from my iPhone using Tapatalk

From the left pane go to: AiProtection\Network Protection\Two-Way IPS

 

[hotsauce2007]

I do not intentionally run any torrent programs. I do run BOINC which I know will perform background data exchanges.

are you receiving the email alert?

 

[sol1109]

are you receiving the email alert?

Yes, but I have stopped receiving the original alert for almost a week now. Most of the alerts now are about my smartphone. If this does not happen for another week I guess I will close this and start a new thread on the smartphone.

 

[VANT]

are you receiving the email alert?

if he configured this option then should can receive email.

 

[hotsauce2007]

if he configured this option then should can receive email.

I did the configuration process and I am not getting any emails of alert anymore, I switched from a AC68U to one AC86U, did all settings like before and isant working anymore, not even the test email form the alert system, beside that I´ve got a lot of hits, my entire network is clean, no virus, no nothing.

 

[sol1109]

I did the configuration process and I am not getting any emails of alert anymore, I switched from a AC68U to one AC86U, did all settings like before and isant working anymore, not even the test email form the alert system, beside that I´ve got a lot of hits, my entire network is clean, no virus, no nothing.

Are you using gmail with two factor authentication turned on?

 

[VANT]

I did the configuration process and I am not getting any emails of alert anymore, I switched from a AC68U to one AC86U, did all settings like before and isant working anymore, not even the test email form the alert system, beside that I´ve got a lot of hits, my entire network is clean, no virus, no nothing.

read this

https://www.asus.com/support/FAQ/1010064/#

 

[sol1109]

I also had to setup an app password for AiProtection in my google account.

https://support.google.com/accounts/answer/185833?hl=en

 

[hotsauce2007]

Are you using gmail with two factor authentication turned on?

Yes, thats why I did a app password just for the ASUS Router on google, but even with that, isan´t working anymore.

read this

https://www.asus.com/support/FAQ/1010064/#

I did the same process, but I am using two factor, so I had to generate a password only for asus router, was working 100% with ac68 and not isant working anymore with the asus ac86u

 

[sol1109]

Yes, thats why I did a app password just for the ASUS Router on google, but even with that, isan´t working anymore.



I did the same process, but I am using two factor, so I had to generate a password only for asus router, was working 100% with ac68 and not isant working anymore with the asus ac86u

After the last firmware update I went into my google account and deleted the router application from the approved app list because I had stopped getting emails. I then generated a new app password and it started working again. I am not sure but I suspect one of the router updates somehow affected the original passwords recognition.

 

[hotsauce2007]

After the last firmware update I went into my google account and deleted the router application from the approved app list because I had stopped getting emails. I then generated a new app password and it started working again. I am not sure but I suspect one of the router updates somehow affected the original passwords recognition.

Did the same thing again now for the third time, problem solved...
crazy