I received an alert email from my ISP flagging a potential security issue. I called to get more information, but they told me that they wouldn’t be able to provide any more info on the source of the alert or any IPs associated with it because I’m not using their special equipment. Instead, they directed me to contact my router provider, stating that they would be ale to access my router and see more information on the event. It sounded like BS to me, but is this true? I have an Arris G34. The logs on the router itself aren’t too helpful. The only strange thing is a number of entries starting about two days before the security email arrived:IGD: config.utapi s_add_portmapdyn: add entry (index 1): add/overwrite entry param portmap_dyn_1 value:enabled,none,43431,192.168.0.***,7070,tcp,165600,1721088246,AnyDeskThere are 66 of these entries in total, with three occurring almost exactly at the 4th minute of every hour, for 22 hour
