NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Grafixmac
Sep 18, 2021Tutor
Logged in from another device, being disconnected
There are only two other threads I can find on this and I've used the advice on one of them. The other was of no use. I have two other threads posted about spam attempts, which is what I believe star...
FURRYe38
Sep 20, 2021Guru - Experienced User
👍
Grafixmac
Sep 20, 2021Tutor
I was able to log in to the router with the ethernet cable removed from my (cable) modem. It showed "Internet disconnected" (which is to be suspected.)
FYI: I also ran a malware program on both my phone and my wifes. Plus a separate virus program. Both phones are apparently clean.
Does that indicate anything to you?
I've tried looking for "logged in from another device" as a general Internet search but revealed only one other topic, and it is a post from here, which basically says to do a hard factory reset to the router, which I've done already.
It just seems strange that this started happening after the "incident", but it could be coincidental. As posted above, it seems to disconnect when we have a lot of devices on (running Prime on my TV), along with my home computer, work computer, kids laptop, 2 phones running also (but never was a problem before).
Is it possible this is a glitch is the result of too much bandwidth "overload" and then that messages appears, or is someone else actually logged in from somewhere else? The logs seem to correspond with the TV usage.
I want to try unplugging and disconnecting all devices except for my one TV, and seeing if I get an interuption.
I aslo want to try unplugging and disconnecting everything and see if my 5G light blinks (showing activity).
- FURRYe38Sep 20, 2021Guru - Experienced User
Try unplugging all other wired devices, might change the SSID name to something different to prevent anything else from accessing the router. Then connect the modem back up to the router and use 1 wired PC to see if you can access the routers web page and see if you get that message again or not. I would also turn OFF the modem for 1-2 minutes as well then back ON.
- GrafixmacSep 20, 2021Tutor
That was one thing I did not change when I factory reset the modem was change the SSID. I thought about it, but I was too flustered to think of something new I liked so I stuck with the old one.
So I should get the thunderbolt to ethernet cable tomorrow, and will try your suggestion.
I only have one wired device connected to my wifi router, and it is my wifi camera system's hub.
If someone DOES have access to my computer, if I change the SSID, shouldn't I also change the router password too?
Assuming I do update the SSID and password, I will then have to relink all of the devices to the new SSID, correct? (Not complaining but just checking).
- FURRYe38Sep 20, 2021Guru - Experienced User
Yes change the pw as well.
This is just a temporary troubleshooting step to see if something on the LAN side is connecting to the router. You can change it back later of if you like.
- GrafixmacSep 21, 2021Tutor
Again thanks for all the help. As I work from home, I'll have to wait until later in the day to mess with the router so as not to disrupt expected meetings. I plan to shut off all devices except my home laptop and my cell, disconnect my ethernet cable from the cable modem to the wifi, login to the wifi router (confirmed I was able to do this yesterday), change the SSID and password (this was there is less likelihood that if someone is snooping, they won't be able to connect since there is no Internet connection).
I will update with results.
- GrafixmacSep 21, 2021Tutor
Reset my SSID and changed my password. I did see this in the logs this morning. I believe it is coming from my TV. I get disconnected every time I use Prime or Tubi on my Samsung TV. I then have to restart everything. I did not get the logged in from elsewhere message though.
[DoS attack: FIN Scan] attack packets in last 20 sec from ip [34.117.254.173], Tuesday, Sep 21,2021 09:48:03
So the above is new (first time) I've seen something like this.
I checked for an update to my TV software and there is none available.
- FURRYe38Sep 21, 2021Guru - Experienced User
https://whois.domaintools.com/34.117.254.173
Seems to be Google.
Does your system work ok if you don't use the TV?
- GrafixmacSep 21, 2021Tutor
Does Google just randomly ping computers like that? I don't use Google for anything. Well, at least I've turned off as much as I can on my Android.
It does seem to work better when not on my TV. I've now changed the channel on my 5Ghz band to something different and will be expirementing with using 2.4Ghz on some devices.
I just also updated the firmware to V1.5.1.80_10.0.54
The issue is that prior to all of this disconnection, I had not changed the 5g broadband channel and had a mix of devices on 5G and 2.4G. After the rejiggering, I set all of them to 5G, and maybe that made it worse.
But I did another test. I turned off and disconnected everything in my house, so only my TV and work laptop were on. I got bumped again. It will be interesting now to try it again with my computer set to 2.4 and the TV on 5G.
I just can't make any sense of this. I know enough to troubleshoot, but there are still enough variables (cable modem, wifi router, settings on each, firmware on each, the actual cable company, my connections coming into the house, the TV itself) that I cannot nail down what it is, and maybe there is something that is beyond my knowledge that I would never think about... so hoping others here might be able to piece something together or suggest other tests...
- FURRYe38Sep 21, 2021Guru - Experienced User
Is the initial problem still happening?
You are setting up a new PW for the admin loggin credentials right?
- GrafixmacSep 22, 2021Tutor
I completely moved my entire setup (cable modem and wifi router and attached security system) to a more central location in the house), and rewired a cable from the booster that runs into the house directly to the cable modem. However before I even did this, I tweaked some other things, and I'm not even sure what that is anymore. For some reason Remote Management was on, that has been turned off. I am able watch TV now on Tubi or Prime for hours without dropping. I'm also not getting a prompt to re-login after just a minute or two on the router.login page. I set a bunch of my devices back to 2.4Ghz. I've got many of them reconnected but not all. It seems to be going well so far, however, I now have a new problem.
I now only see TWO of my devices on the app and in the router login. I'm definitely connected to more than one device. ARGH! This is so frustrating!!!!!!
- FURRYe38Sep 22, 2021Guru - Experienced User
Sounds like you did something to help your situation for the most part.
- GrafixmacSep 22, 2021Tutor
Yeah, I think it was part of the factory reset + changing passwords + changing SSID + updating firmware + switching some devices from 5G to 2.4G + the new hardwired configuration + changing channel for 5G...
How do I notify Netgear support that this firmware upgrade basically will not allow me to see more than two devices? I've seen this in other threads here on Netgear and it seems like basically it is a bug in the firmware updates.
- GrafixmacSep 22, 2021Tutor
Thanks. I've contacted the MOD.
One other (probably stupid) question. Can I be logged into the Android Nightwawk app AND to the router login page at the same time? I'm thinking that logging into one will log me out of the other?
- FURRYe38Sep 22, 2021Guru - Experienced User
👍
- michaelkenwardSep 22, 2021Guru - Experienced User
Grafixmac wrote:
One other (probably stupid) question.
No such thing as a stupid questjon, only stupid answers. (See below.?)
Grafixmac wrote:
Can I be logged into the Android Nightwawk app AND to the router login page at the same time?
Excellent question. I just tried it.
Grafixmac wrote:
I'm thinking that logging into one will log me out of the other?
That would make sense. You don't want two users messing around with sttings at the same time. (Arlo kicks you out if you sneak up from a different direction.) My experience is that log in with a browser on a PC and the mobile app just won't let you in. You just get some inscrutable "cannot access" response.
Bit it a mess. Needs fixing.
Try it yourself and see what happens. Then maybe we can provoke some action from Netgear.
- GrafixmacSep 22, 2021Tutor
I have tried it, and quite a LOT while doing my 100 hours of troubleshooting over the last two weeks, simply because I thought the two were compatible. It may have been why I was being logged out on some occasions but I truly believe that someone else did somehow gain access. There is just no reason why coincidence would be the answer to my original issue of clicking on the link and then having the issue "pop up" thereafter. I just don't know how these people gain access like this, or why.
So, yes, I have been looking at the log in great detail and noticed succinctly that when I logged into my phone app this morning, I was logged out of the router login. Since I had not logged into my phone the whole morning until then and stayed logged in, it is likely, but I'm a little hyper-aware and unsure of it all since I believe someone else did have access.