NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
JRRouter
Nov 14, 2022Aspirant
Was my router hacked
The weirdest thing happened to me this morning, when I was on a Zoom meeting for the first day on the job. Suddenly the router was disconnected from internet. I have to call the ISP to figure out if it was them, which is always a possibility. The weird thing is the timing of it, and that it almost never happens - that and the logs in the router show some funky timestamps for activity that should not be there in 2024. And oddly the log was cleared from the reboot, which may just be how the system is configured not sure though. I'd be happy to provide more information like the logs themselves to see if anyone can recognize what is going on here. Here is one example of an entry from the log
[DHCP IP: (192.168.2.6)] to MAC address , Monday, Mar 25,2024 14:01:08
How could this be if we're in the year 2022? Is this as suspicious as it seems to me?
10 Replies
- microchip8MasterYou router most likely crashed and rebooted. Check your time settings and zone
- JRRouterAspirant
Hadn't thought of that. Is it possible the dates are from reboot, before the time zone synchronized and that's why they're like that? Also does a crash usually involve losing all previous log data like that? If so that also seems pretty convenient to anyone trying to get into there over the network.
I already unchecked a few settings like remote administration which I had on just in case.
- JRRouterAspirant
I don't think time zones account for 2 year difference đź
What router model do you have?
What Firmware version is currently loaded?
What is the Mfr and model# of the Internet Service Providers modem/ONT the NG router is connected too?Is the Guest Network enabled by chance? 192.168.2.x is usually a device that's connected to the Guest Network.
Do you have the time set up right on the router?
- JRRouterAspirant
There's no modem it's using PPPoE through the building I live at, and the 192.168.2.0/24 subnet is my primary network. I just set it up that way.
- JRRouterAspirant
Hardware Version
R6250
Firmware Version
V1.0.4.38_10.1.30Check your devices for MAC addresses against what you see in the logs.