• SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

Recent content by Rubenel

  1. Rubenel

    Possibly been hacked. Need assistant from senior users.

    Thanks Collin for the post. Sent from my SM-G950U using Tapatalk
  2. Rubenel

    Possibly been hacked. Need assistant from senior users.

    It may be, but I did turn off this feature once I deleted the app. This is an exploit in the firmware. Sent from my SM-G950U using Tapatalk
  3. Rubenel

    Possibly been hacked. Need assistant from senior users.

    Thanks for posting. I had SSH and WAN access turned off. This is an exploit in the firmware. Sent from my SM-G950U using Tapatalk
  4. Rubenel

    Possibly been hacked. Need assistant from senior users.

    I've formatted the disk and will back up my MacOS once again. Thanks. Sent from my SM-G950U using Tapatalk
  5. Rubenel

    Possibly been hacked. Need assistant from senior users.

    Yes sorry. I wasn't 100 percent. I believe I said Asian region in one of my post. I've got the router operating after a wipe and refresh of the firmware and update. Sent from my SM-G950U using Tapatalk
  6. Rubenel

    Possibly been hacked. Need assistant from senior users.

    Anyways, thanks Merlin for the attention and contributions. I'm going to wipe the router and update. Sent from my SM-G950U using Tapatalk
  7. Rubenel

    Possibly been hacked. Need assistant from senior users.

    They got into the router, assigned their PPTP VPN, shut down my VPN and enabled AiDisk. They were after my 1TB attachment. Luckily, AiDisk doesn't work in a multi-nat environment, so their effort wasn't fruitful. Sent from my SM-G950U using Tapatalk
  8. Rubenel

    Possibly been hacked. Need assistant from senior users.

    I need the router to be in operations again. I am going to wipe and reload the firmware and update. I will report back with any suspicious activities. Thanks guys.
  9. Rubenel

    Possibly been hacked. Need assistant from senior users.

    Outside of the firmware not being up to date, is there any way to confirm this isn't a vulnerability in the firmware that may not be patched as of today. Can I perform a system dump, if possible? SSH, WAN ACCESSS were both off. How can I determine how they gained access to the router? Sent...
  10. Rubenel

    Possibly been hacked. Need assistant from senior users.

    I didn't setup the PPTP VPN, not did I activate the AiDisk or the PPTP VPN. Also when I looked at the services, ssh and WAN access is off. So who gain access found a vulnerability in the firmware. I'm going to contact the creator of Merlin to let him know. This has to be patched. Sent...
  11. Rubenel

    Possibly been hacked. Need assistant from senior users.

    More..... Sent from my SM-G950U using Tapatalk
  12. Rubenel

    Possibly been hacked. Need assistant from senior users.

    More pictures. Sent from my SM-G950U using Tapatalk
  13. Rubenel

    Possibly been hacked. Need assistant from senior users.

    Here is the syslog along with other photos of the current configurations. https://drive.google.com/file/d/1C5pW4gJnWHj-7-i3xfAU2O4aaacFd2Or/view?usp=drivesdk Sent from my SM-G950U using Tapatalk
  14. Rubenel

    Possibly been hacked. Need assistant from senior users.

    My logs show Feb 11 too..... Logs will be posted. Sent from my SM-G950U using Tapatalk
Back
Top