NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

HenryHawk's avatar
HenryHawk
Follower
Jun 06, 2021

AC1750 Router Logs Showing (nearly) Duplicate Entries

When inspecting this Netgear Nighthawk AC1750 Router's Logs, several (nearly) duplicate entries have me a bit perplexed. The 'Login admin failure' and 'DHCP IP' entries appear one immediately following the other at approximately 20 second intervals. Other than a panty sniffer type living nearby that might get-off on spoofing my device's MAC and IP addresses for whatever reason, (which I fear may be a distinct possibility), what other logical explanations might exist for these occurences taking place? What actions would you suggest? I also found a 'Block Attack' entry that I found to be curious.

 

According to the router's update feature the most recent firmware is installed: V1.0.4.106_10.0.80 

 

Below are a few examples of what I'm referring to. Thanks!

 

[Admin login failure] from source 192.168.1.3, Wednesday, June 01,2020 09:30:11
[Admin login failure] from source 192.168.1.3, Wednesday, June 01,2020 09:29:52

 

[Admin login failure] from source 192.168.1.3, Wednesday, June 02, 2020 09:39:55
[Admin login failure] from source 192.168.1.3, Wednesday, June 02, 2020 09:39:33

 

[DHCP IP: (192.168.1.3)] to MAC address XX:XX:21:XX:2X:3X, Saturday, June 05,2021 06:31:52
[DHCP IP: (192.168.1.3)] to MAC address XX:XX:21:XX:2X:3X, Saturday, June 05,2021 06:31:31

 

[DHCP IP: (192.168.1.3)] to MAC address XX:XX:21:XX:2X:3X, Sunday, June 06,2021 04:45:35
[DHCP IP: (192.168.1.3)] to MAC address XX:XX:21:XX:2X:3X, Sunday, June 06,2021 04:45:13

 

[Block Attack] From source: 192.168.1.3, port 80, Wednesday, June 02, 2020 09:41:38

1 Reply

  • DarrenM's avatar
    DarrenM
    Sr. NETGEAR Moderator

    Have you checked the attached devices page and see what device is assigned the 192.168.1.3 IP address?