What's new

GT-AX11000 NVRAM how to block read ??

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

ToXic_DST

Occasional Visitor
My son always crack my router and change parental control --always read nvram and read my new password :((( how to block read NVRAM please help(
 
always read nvram and read my new password
This is highly unlikely, although not impossible. If your son is able to do this it would be a major security issue for Asus. You need to determine how he is doing this before you (or Asus) can fix the problem.
 
This i log please read his using linux mayby using option only specific IP
dont worry im change the password
 

Attachments

  • log.txt
    268.2 KB · Views: 72
Last edited:
Are you using a computer he has access to make these changes? Are you writing the password down anywhere? Are you clearing your browser cache and/or rebooting your computer afterward?

The way he gets the password may not be directly from the router.
 
everything is in the log
There is nothing particularly useful in the log. We need more clues. Knowing when your son changed the router would be a big help.

In the meantime go to System Log - General Log and change "Log only messages more urgent than" to "all".
 
now son login
Jun 7 20:03:12 dropbear[9450]: Login attempt for nonexistent user
Jun 7 20:28:19 miniupnpd[2414]: upnp_event_process_notify: connect(192.168.1.55:2869): Connection timed out
Jun 7 20:28:23 miniupnpd[2414]: upnp_event_process_notify: connect(192.168.1.55:2869): Connection timed out
Jun 7 20:28:23 miniupnpd[2414]: upnpevents_processfds: 0x7a0770, remove subscriber uuid:c6ee874c-ecb7-4a04-8ca1-7eca5746242a after an ERROR cb: http://192.168.1.55:2869/upnp/eventing/vwhqfcaxyi
Jun 7 20:29:18 miniupnpd[2414]: upnp_event_process_notify: connect(192.168.1.55:2869): Connection timed out
Jun 7 20:29:20 miniupnpd[2414]: upnp_event_process_notify: connect(192.168.1.55:2869): Connection timed out
Jun 7 20:29:29 miniupnpd[2414]: upnp_event_process_notify: connect(192.168.1.55:2869): Connection timed out
Jun 7 20:29:30 miniupnpd[2414]: upnp_event_process_notify: connect(192.168.1.55:2869): Connection timed out
Jun 7 20:29:30 miniupnpd[2414]: upnpevents_processfds: 0x7a0ea0, remove subscriber uuid:a78ce4a6-20a3-4812-9570-dbc52f9910d1 after an ERROR cb: http://192.168.1.55:2869/upnp/eventing/rulinwgbld

using dropbear ssh ???
 
Doesn't look like anyone is connected?
 
connected
 

Attachments

  • gtax.JPG
    gtax.JPG
    61.5 KB · Views: 69
and now
Jun 7 20:54:17 rc_service: httpds 26161:notify_rc restart_time;restart_leds;restart_usb_idle;restart_firewall;
Jun 7 20:54:17 ntpd: Stopped ntpd
Jun 7 20:54:17 dropbear[2077]: Early exit: Terminated by signal
Jun 7 20:54:17 syslogd exiting
Jun 7 20:54:18 syslogd started: BusyBox v1.25.1
Jun 7 20:54:18 kernel: klogd started: BusyBox v1.25.1 (2022-03-25 10:24:24 EDT)
Jun 7 20:54:18 miniupnpd[2414]: shutting down MiniUPnPd
Jun 7 20:54:18 ToXic: sh /opt/S50asuslighttpd.1 firewall-start
Jun 7 20:54:18 miniupnpd[17658]: HTTP listening on port 56174
Jun 7 20:54:18 miniupnpd[17658]: Listening for NAT-PMP/PCP traffic on port 5351
Jun 7 20:54:33 hour_monitor: daemon is starting
 
I think the quickest solution is for you to factory reset the router and set it up again. Don't use a backup file.

dropbear: You can disable SSH by going to Administration - System and setting Enable SSH to No. Change the Router Login Password again after disabling SSH.
 
Last edited:

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top