× NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Orbi WiFi 7 RBE973
Reply

Re: Was my router hacked

JRRouter
Aspirant

Was my router hacked

The weirdest thing happened to me this morning, when I was on  a Zoom meeting for the first day on the job.  Suddenly the router was disconnected from internet.  I have to call the ISP to figure out if it was them, which is always a possibility.  The weird thing is the timing of it, and that it almost never happens - that and the logs in the router show some funky timestamps for activity that should not be there in 2024.  And oddly the log was cleared from the reboot, which may just be how the system is configured not sure though.  I'd be happy to provide more information like the logs themselves to see if anyone can recognize what is going on here.  Here is one example of an entry from the log

 

[DHCP IP: (192.168.2.6)] to MAC address , Monday, Mar 25,2024 14:01:08

 

How could this be if we're in the year 2022?  Is this as suspicious as it seems to me?

Message 1 of 11
microchip8
Master

Re: Was my router hacked

You router most likely crashed and rebooted. Check your time settings and zone
Message 2 of 11
FURRYe38
Guru

Re: Was my router hacked

What router model do you have?

What Firmware version is currently loaded?
What is the Mfr and model# of the Internet Service Providers modem/ONT the NG router is connected too?

 

 

Is  the Guest Network enabled by chance? 192.168.2.x is usually a device that's connected to the Guest Network.

 

Do you have the time set up right on the router? 

Message 3 of 11
JRRouter
Aspirant

Re: Was my router hacked

Hadn't thought of that.  Is it possible the dates are from reboot, before the time zone synchronized and that's why they're like that?  Also does a crash usually involve losing all previous log data like that? If so that also seems pretty convenient to anyone trying to get into there over the network.

 

I already unchecked a few settings like remote administration which I had on just in case.

Message 4 of 11
JRRouter
Aspirant

Re: Was my router hacked

There's no modem it's using PPPoE through the building I live at, and the 192.168.2.0/24 subnet is my primary network. I just set it up that way.

Message 5 of 11
JRRouter
Aspirant

Re: Was my router hacked

Hardware Version

R6250

 

Firmware Version
V1.0.4.38_10.1.30

Message 6 of 11
FURRYe38
Guru

Re: Was my router hacked

Check your devices for MAC addresses against what you see in the logs. 

Message 7 of 11
JRRouter
Aspirant

Re: Was my router hacked

Those are all good.  Matching for just the 4 or 5 devices I have connected to the two interfaces on Netgear.  No more no less.

 

Do you any idea why the 2024 date would have appeared in my logs?

 

Message 8 of 11
FURRYe38
Guru

Re: Was my router hacked

Possible some glitch in the router logging system. Anything is possible sometimes. 

I presume you have the NTP feature enabled and set correctly? 

Message 9 of 11
JRRouter
Aspirant

Re: Was my router hacked

This doesn't really add to my understanding of what happened.  If the log glitch happened during a system crash, are you saying that both the router would go OFFLINE and I would lose connection with all devices, but then somehow the log glitch doesn't show any record of anything before?  That is what I am so suspicious about.  Can you please comment on the small chance that the device could have been breached and whether there's any real evidence for me to consider a factory reset on my router device?

Message 10 of 11
JRRouter
Aspirant

Re: Was my router hacked

I don't think time zones account for 2 year difference 😮

Message 11 of 11
Discussion stats
  • 10 replies
  • 1858 views
  • 0 kudos
  • 3 in conversation
Announcements

Orbi 770 Series