Router appears to be hacked - cannot login using https Netgear N300

[nickperth]

Hi There, Ive just set-up my router and have had it running for 24hours and all of a sudden when logging into the router it is not connecting via HTTPS and the actual display on every page appears to have chnaged slightly. I am also unable to browse any websites securely. I have done a reset and this has not helped..... please help!!!

[michaelkenward]

Which modem are you using?

N300 is an industry standard. Not a model number. Many companies make N300 boxes, including Netgear.

That is just one of several questions that people will ask before they can help.

For example, what is your internet connection? ADSL? Fibre?

As the hints on this forum say:

"Body (Include additional detail including model version, firmware, OS and environment where relevant.)"

[nickperth]

HI Michael, thanks for letting me know... Im using a DGN2200V4 on the latest Firmware Version
V1.0.0.66_1.0.66 on an ADSL2+ connection via iinet.

Im using PPPOE standard connection and have locked down as much as I can. I set-up using OSX and Firefox however have a windows OS as well which is also not allowing https browsing. Ive installed HTTPS everywhere in Firefox and it wont connect at all to the router when it is activated and every page I go to (even when I know its secure) is coming up as http.

The connection speed has also dramitacally dropped and somehow yesterday IPV6 became enabled without my intervention and I was also unable to turn it off on my MAC without using terminal and a command line. I also changed the DNS server to googles and everytime I connect a device it gives me the routers IP as my DNS server even if I manully update it! When I look at the config on the router it has changed back to get DNS from the ISP.

I have hidden the SSID and have WPA2 security enabled however, I am getting connections from unknown MAC addresses which I am blocking but another appears a few hours later.

Also last night; the MAC address on my Windows machine did not match what was listed in the connected devices list so it would appear that there is also MAC address spoofing going on. Ive reset 3 times and was on the phone to iinet support for 3 hours yesterday (that was a challenge in itself) who just ran through their usual script, resolving nothing. I was having a similar problem with the previous 4 routers which were buddii lites from iinet....

As I said; the routers config pages look different and it happens a couple of hours after I have reset it..... its like its a fake page! hoping someone might know what on earth is going on.... 

[Gm13]

This just happened to me..i have been subject to a lot of strange https connect requests that I never initiated.
I was using the advanced admin to block services and check the logs but my son needed some access to a port and I opened t up.

Next thing i know, my router login is failing..the webserver seems disabled nothing comes up. Somebody was able to login to my router and disable the admin screen.

These guys are devious..