Need help. Is something trying to hack my network?

[hexn]

I'll preface this by saying I'm sorry to be a bother. I normally use your forum as a guide to help with problems I encounter with my internet. I can't find anything pertaining to this in particular, so I'd I thought I'd ask.

Have a GT-AX11000. Have only tinkered with it slightly with settings. Its been my router for over a year and a half. I have some unusual activity is the system log when i checked it recent though. I'm not the most tech savvy but it looks like someone is trying to access my network?

Here are the concerning entries:

Dec 31 13:12:26 httpd login lock: Detect abnormal logins at 5 times. The newest one was from 193.138.218.215 in login. Dec 31 13:15:32 httpd login lock: Detect abnormal logins at 5 times. The newest one was from 193.138.218.215 in login lock.

I searched the IP and it's a VPN in Sweden

193.138.218.215 ( Mullvad VPN ) IP Context

193.138.218.215 is part of Mullvad VPN. Mullvad VPN users can hide their activity online using 193.138.218.215. 193.138.218.215 has indicators of geo-fraud. 193.138.218.215 is hosted in SE, however it's users are located in RU. Users from 193.138.218.215 have connected to VPNs or Proxies. There...

spur.us

193.138.218.215 | 31173 Services AB | AbuseIPDB

www.abuseipdb.com

Can anyone help? Am I overreacting?

Ill attach the log. I cleared my system log so this is from the last few hours:

 

[RMerlin]

Disable WAN access to httpd on the System -> Administration page. Every port scanner out there will randomly keep hitting it.

 

[hexn]

Disable WAN access to httpd on the System -> Administration page. Every port scanner out there will randomly keep hitting it.

I think I just disabled it from the Remote Access Config section. I guess that would have been enabled when the Asus router app was installed, as I don't recall manually changing it (if that's not default) ?

 

[Mogsy]

I think I just disabled it from the Remote Access Config section. I guess that would have been enabled when the Asus router app was installed, as I don't recall manually changing it (if that's not default) ?

When first installed a notice will pop-up asking if Remote Connection should be enabled/disabled. I try to avoid the app both on stock and Merlin FW

 

[L&LD]

Don't use apps (at all) if security is a concern for you.

 

[Crimliar]

Just as an addendum, the easy way to enable WAN access without realising it (if you don't read all the details) is to enable Amazon Alexa!