GL-RM1 v1.8.0 release 3 Intrusion Detection

Hi, I just saw an issue today in my firewall. Before I update, I thought I’d share for a possible security audit. I have 4 of these GL-RM1 that all have been attacked.

One GL-RM1PE on v1.8.0 release1 (KVM Bench) says in the statistics, it was also affected, but I don’t see any entries..

https://www.reddit.com/r/GlInet/comments/1t97tk5/potential_malware_on_glinet_comet/

1 Like

Thanks @sullyjman

So now that I blocked them from the internetI can see, that each KVM is calling other continents 7.000 times a day. Is this designed behavior? I don’t use tailscale or any other VPN. just internally through IP in a browser.

Not sure what is expected behavior for their keep alives as I am not a dev for gl inet. I would suggest you update to 1.9.0