- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
Re: Was my router hacked
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Was my router hacked
The weirdest thing happened to me this morning, when I was on a Zoom meeting for the first day on the job. Suddenly the router was disconnected from internet. I have to call the ISP to figure out if it was them, which is always a possibility. The weird thing is the timing of it, and that it almost never happens - that and the logs in the router show some funky timestamps for activity that should not be there in 2024. And oddly the log was cleared from the reboot, which may just be how the system is configured not sure though. I'd be happy to provide more information like the logs themselves to see if anyone can recognize what is going on here. Here is one example of an entry from the log
[DHCP IP: (192.168.2.6)] to MAC address , Monday, Mar 25,2024 14:01:08
How could this be if we're in the year 2022? Is this as suspicious as it seems to me?
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Was my router hacked
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Was my router hacked
What router model do you have?
What Firmware version is currently loaded?
What is the Mfr and model# of the Internet Service Providers modem/ONT the NG router is connected too?
Is the Guest Network enabled by chance? 192.168.2.x is usually a device that's connected to the Guest Network.
Do you have the time set up right on the router?
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Was my router hacked
Hadn't thought of that. Is it possible the dates are from reboot, before the time zone synchronized and that's why they're like that? Also does a crash usually involve losing all previous log data like that? If so that also seems pretty convenient to anyone trying to get into there over the network.
I already unchecked a few settings like remote administration which I had on just in case.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Was my router hacked
There's no modem it's using PPPoE through the building I live at, and the 192.168.2.0/24 subnet is my primary network. I just set it up that way.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Was my router hacked
Hardware Version
R6250
Firmware Version
V1.0.4.38_10.1.30
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Was my router hacked
Check your devices for MAC addresses against what you see in the logs.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Was my router hacked
Those are all good. Matching for just the 4 or 5 devices I have connected to the two interfaces on Netgear. No more no less.
Do you any idea why the 2024 date would have appeared in my logs?
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Was my router hacked
Possible some glitch in the router logging system. Anything is possible sometimes.
I presume you have the NTP feature enabled and set correctly?
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Was my router hacked
This doesn't really add to my understanding of what happened. If the log glitch happened during a system crash, are you saying that both the router would go OFFLINE and I would lose connection with all devices, but then somehow the log glitch doesn't show any record of anything before? That is what I am so suspicious about. Can you please comment on the small chance that the device could have been breached and whether there's any real evidence for me to consider a factory reset on my router device?
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Was my router hacked
I don't think time zones account for 2 year difference 😮
User | Count |
---|---|
2 | |
2 | |
1 | |
1 | |
1 |
• Introducing NETGEAR WiFi 7 Orbi 770 Series and Nighthawk RS300
• What is the difference between WiFi 6 and WiFi 7?
• Yes! WiFi 7 is backwards compatible with other Wifi devices? Learn more