NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Kakashi2000
Sep 11, 2016Star
netgear cold you explain this
i dont know is some one or a haker is trying to acess to my modem but he cant so i have this logs the name that i have for the user is admin not thos rare names wtf is going i think some...
DarrenM
Dec 08, 2016Sr. NETGEAR Moderator
Hello Robtheone
It says its coming from a local Ip are you able to go to your attached devices and see if anything shows up with those ips 111-115?
DarrenM
robtheone
Dec 10, 2016Star
Yes, you are correct. The logs show the Router Login attempts coming from my main PC connected to the Router via ethernet. This is why it scared me. I though perhaps a trojan was on my PC, doing who knows what kind of damage, perhaps a keylogger, or data and credit card stealer.
HOWEVER, after looking into it and researching, I determined exactly what happened. I had just installed a free version of Avast Anti-Virus program a couple days before this, and never put anti-virus software and someone trying to log into my router as being connected. I realized the program has a feature (perhaps it is only for 30 days, because I have the FREE Version, and not what I thought I had downloaded), which will check your network for vulnerabilities. I clicked run "Smart Scan" which I assumed was a simple Anti-Virus check, but actually also includes the network check for threats. So it turns out that Avast was attempting to use some basic, generic logins from many different Router companies that have default username and passwords to see if they can gain access to my network, if the default logins were never changed. Hence the odd usernames, which I found from googling some of them, which helped put the puzzle pieces together. So, I re-ran just the network test portion of the software and confirmed that was exactly what happened. I saw the same exact router login attempts in my logs and confirmed this was the issue.
So anyone else seeing these weird random logins, I hope you find this information useful. If you are running any network testing software, that is the likely culprit for what is showing on the logs. I appreciate you answering and trying to help determine the problem.
Mystery solved! Phew, do I feel better!