hacked

I have a AC88U running an OPVN server for when I am away. Sometimes I forget to turn this off when I am home and early this morning starting at 4:30 EST, I got a hit from an IP located in Ukraine or Russia. What I cannot see is if they successfully connected or if they were just trying to...

I’d like to share with you my router log at least from when I tried to reset just to enlighten you all. Anyway I would like to here your opinion on this log and to fill in some details I haven’t made any changes except the reboot!

hello, i'm south korean. and.. Please forgive my translator English. My RT-AC86U router seems to be hacked by pro hacker. They can monitor what I do through computers in real time. This is my very personal idea, I think RT-AC86U seems to share the AUTHENTICATION BYPASS VULATERABILIT of ASUS...

This evening, while trying to figure out why my kid can't play Dragonvale over Wifi, I discovered that DDNS was enabled on my router -- i had one of those asuscomm domain names assigned to me. Worse, Samba was turned on. I have two USB drives where I sftp restic and duplicity backups from a...

Recently my router was hacked and I have been trying to recover it, but I suspect that somehow there is malicious code lurking in there somewhere. I have factory reset, hard factory reset, re-initialized settings, re-flashed various versions of both stock and Merlin firmware what feels like a...

My router was recently hacked and I was locked out. I've done several factory resets, 2 hard factory resets, put the router and rescue mode and flashed the latest beta firmware about 8 times. Could anyone please tell me if the following entries are supposed to be in iptables? I've flushed the...

I recently noticed a binary running from /tmp and found out that the router has hacked. It is sort of self-installing trojan or something, whatever. I was able to track it down and cleanup its loader from /jffs However, during the discovery I realized that it there is a lot of processes which...

Greetings. I have been seeing some strange listings in my General SysLog. I added line feeds & emphasis to make it clearer to read. I think what's happening is the actual user name (replaced by _USERNAME_ below) may be compromised. I can't tell from this if the password is also compromised or is...

o_O Hi all, I've been having issues with my NVRAM filling up the last couple of days, and have been looking over all my settings (currently using 384.13 Merlin on an ASUS RT-AC68U), and just noticed this filling up my log. I'm certainly no expert but it appears that someone(s) trying to brute...

I had installed iptraf via entware just to mess around a bit with monitoring... after enabling promiscuous mode, I was seeing packets flying around from the local neighborhood/node... soon browsing became largely unresponsive, and the router logs were showing some strange activity; eventually...