GT-AX11000 NVRAM how to block read ??

ToXic_DST

Occasional Visitor
My son always crack my router and change parental control --always read nvram and read my new password :((( how to block read NVRAM please help(
 

ColinTaylor

Part of the Furniture
always read nvram and read my new password
This is highly unlikely, although not impossible. If your son is able to do this it would be a major security issue for Asus. You need to determine how he is doing this before you (or Asus) can fix the problem.
 

ToXic_DST

Occasional Visitor
This i log please read his using linux mayby using option only specific IP
dont worry im change the password
 

Attachments

  • log.txt
    268.2 KB · Views: 21
Last edited:

L&LD

Part of the Furniture
Are you using a computer he has access to make these changes? Are you writing the password down anywhere? Are you clearing your browser cache and/or rebooting your computer afterward?

The way he gets the password may not be directly from the router.
 

ColinTaylor

Part of the Furniture
everything is in the log
There is nothing particularly useful in the log. We need more clues. Knowing when your son changed the router would be a big help.

In the meantime go to System Log - General Log and change "Log only messages more urgent than" to "all".
 

ToXic_DST

Occasional Visitor
now son login
Jun 7 20:03:12 dropbear[9450]: Login attempt for nonexistent user
Jun 7 20:28:19 miniupnpd[2414]: upnp_event_process_notify: connect(192.168.1.55:2869): Connection timed out
Jun 7 20:28:23 miniupnpd[2414]: upnp_event_process_notify: connect(192.168.1.55:2869): Connection timed out
Jun 7 20:28:23 miniupnpd[2414]: upnpevents_processfds: 0x7a0770, remove subscriber uuid:c6ee874c-ecb7-4a04-8ca1-7eca5746242a after an ERROR cb: http://192.168.1.55:2869/upnp/eventing/vwhqfcaxyi
Jun 7 20:29:18 miniupnpd[2414]: upnp_event_process_notify: connect(192.168.1.55:2869): Connection timed out
Jun 7 20:29:20 miniupnpd[2414]: upnp_event_process_notify: connect(192.168.1.55:2869): Connection timed out
Jun 7 20:29:29 miniupnpd[2414]: upnp_event_process_notify: connect(192.168.1.55:2869): Connection timed out
Jun 7 20:29:30 miniupnpd[2414]: upnp_event_process_notify: connect(192.168.1.55:2869): Connection timed out
Jun 7 20:29:30 miniupnpd[2414]: upnpevents_processfds: 0x7a0ea0, remove subscriber uuid:a78ce4a6-20a3-4812-9570-dbc52f9910d1 after an ERROR cb: http://192.168.1.55:2869/upnp/eventing/rulinwgbld

using dropbear ssh ???
 

L&LD

Part of the Furniture
Doesn't look like anyone is connected?
 

ToXic_DST

Occasional Visitor
connected
 

Attachments

  • gtax.JPG
    gtax.JPG
    61.5 KB · Views: 25

ToXic_DST

Occasional Visitor
and now
Jun 7 20:54:17 rc_service: httpds 26161:notify_rc restart_time;restart_leds;restart_usb_idle;restart_firewall;
Jun 7 20:54:17 ntpd: Stopped ntpd
Jun 7 20:54:17 dropbear[2077]: Early exit: Terminated by signal
Jun 7 20:54:17 syslogd exiting
Jun 7 20:54:18 syslogd started: BusyBox v1.25.1
Jun 7 20:54:18 kernel: klogd started: BusyBox v1.25.1 (2022-03-25 10:24:24 EDT)
Jun 7 20:54:18 miniupnpd[2414]: shutting down MiniUPnPd
Jun 7 20:54:18 ToXic: sh /opt/S50asuslighttpd.1 firewall-start
Jun 7 20:54:18 miniupnpd[17658]: HTTP listening on port 56174
Jun 7 20:54:18 miniupnpd[17658]: Listening for NAT-PMP/PCP traffic on port 5351
Jun 7 20:54:33 hour_monitor: daemon is starting
 

ColinTaylor

Part of the Furniture
I think the quickest solution is for you to factory reset the router and set it up again. Don't use a backup file.

dropbear: You can disable SSH by going to Administration - System and setting Enable SSH to No. Change the Router Login Password again after disabling SSH.
 
Last edited:

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top