What's new

[Release] Asuswrt-Merlin 380.65 is now available

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

RT-AC88U
Firmware 380.65

Did someone hacked my router?

Feb 19 01:47:34 odhcp6c[21947]: Server returned message status 0
Feb 19 02:03:56 syslogd started: BusyBox v1.25.1
Feb 19 02:03:56 kernel: klogd started: BusyBox v1.25.1 (2017-02-03 00:20:52 EST)
Feb 19 02:04:03 dropbear[30898]: Running in background
Feb 19 02:04:03 start_nat_rules: apply the nat_rules(/tmp/nat_rules_ppp0_eth0)!
Feb 19 02:04:04 RT-AC88U: start httpd - SSL
Feb 19 02:04:04 RT-AC88U: start httpd
Feb 19 02:04:04 miniupnpd[30931]: HTTP listening on port 34332
Feb 19 02:04:04 miniupnpd[30931]: Listening for NAT-PMP/PCP traffic on port 5351
Feb 19 02:04:04 miniupnpd[30931]: shutting down MiniUPnPd
Feb 19 02:04:04 miniupnpd[30933]: HTTP listening on port 36120
Feb 19 02:04:04 miniupnpd[30933]: Listening for NAT-PMP/PCP traffic on port 5351
Feb 19 02:04:05 hour monitor: daemon is starting
Feb 19 02:04:15 dropbear[30934]: Child connection from 186.190.203.67:42363
Feb 19 02:04:36 dropbear[30934]: Password auth succeeded for 'dimitris' from 186.190.203.67:42363
Feb 19 02:06:32 dropbear[30934]: Exit (dimitris): Error reading: Connection timed out

According to this site (https://www.iplocation.net/) the ip 186.190.203.67 is from Argentina and i live in Greece :eek:
 
Last edited:
RT-AC88U
Firmware 380.65

Did someone hacked my router?

Feb 19 01:47:34 odhcp6c[21947]: Server returned message status 0
Feb 19 02:03:56 syslogd started: BusyBox v1.25.1
Feb 19 02:03:56 kernel: klogd started: BusyBox v1.25.1 (2017-02-03 00:20:52 EST)
Feb 19 02:04:03 dropbear[30898]: Running in background
Feb 19 02:04:03 start_nat_rules: apply the nat_rules(/tmp/nat_rules_ppp0_eth0)!
Feb 19 02:04:04 RT-AC88U: start httpd - SSL
Feb 19 02:04:04 RT-AC88U: start httpd
Feb 19 02:04:04 miniupnpd[30931]: HTTP listening on port 34332
Feb 19 02:04:04 miniupnpd[30931]: Listening for NAT-PMP/PCP traffic on port 5351
Feb 19 02:04:04 miniupnpd[30931]: shutting down MiniUPnPd
Feb 19 02:04:04 miniupnpd[30933]: HTTP listening on port 36120
Feb 19 02:04:04 miniupnpd[30933]: Listening for NAT-PMP/PCP traffic on port 5351
Feb 19 02:04:05 hour monitor: daemon is starting
Feb 19 02:04:15 dropbear[30934]: Child connection from 186.190.203.67:42363
Feb 19 02:04:36 dropbear[30934]: Password auth succeeded for 'dimitris' from 186.190.203.67:42363
Feb 19 02:06:32 dropbear[30934]: Exit (dimitris): Error reading: Connection timed out

According to this site (https://www.iplocation.net/) the ip 186.190.203.67 is from Argentina and i live in Greece :eek:

Very likely. You shall never use expose passwd enabled ssh to WAN.
Disable password auth and generate a rsa key to log to your router immediately.
 
Very likely. You shall never use expose passwd enabled ssh to WAN.
Disable password auth and generate a rsa key to log to your router immediately.
Better yet, disable WAN access completely except for VPN access. There is another thread dedicated to addressing the hacking via WAN.
 
Thank you both
I just noticed another attack? on system log
Feb 19 15:52:44 dropbear[25435]: Child connection from 200.192.211.242:46628
Feb 19 15:52:48 dropbear[25435]: Exit before auth: Exited normally

I disabled completely web access from wan and changed username and pass
Should i do something else? :(
 
Hi in the last few builder there seem to be a issue with the Traffic Analyzer - Statistic
Traffic history location = Custom Location
Save frequency = Every 1 Hour
Save history location = /mnt/SYSTEM/Logs (Front USB port)

Seem be failing to write data on USB stick after about 3 to 4 days and of one core has High CPU usage
 
Hi guys, I'm new to Merlin. I cannot seem to connect to his web page, where is the nest best place to download the latest release? I see lots of mirrors, but I want to be certain to get the file form an approved source.

Thanks!!
 
Hi guys, I'm new to Merlin. I cannot seem to connect to his web page, where is the nest best place to download the latest release? I see lots of mirrors, but I want to be certain to get the file form an approved source.

Thanks!!

Turn off your VPN tunnel, it's probably blacklisted by my provider.

Official mirror sites are on Mediafire and Sourceforge.
 
Hi Merlin. Whether the new version 380.64, improve operation of the hidden network in the 5 GHz frequency as it was in version 380.59. In version 380.63 _2 hidden network is not always visible by the devices that are connected to this network.

RT-AC68U


RMerlin: Wifi performance is what it is, it's entirely under Asus's control.


Welcome To Merlin. In the latest software ASUS RT-AC68U Firmware version 3.0.0.4.380.7266 problem that I described. TV Samsung sees a hidden network on 5 GHz. by contrast, in the software Merlin 380.65 Samsung TV cannot see hidden network in the 5 GHz band
 
:p
s.1487620514.jpg
 
RT-AC66U
Same problem with DLNA that others report after flashing 380.65 final (without factory reset). Was working fine until I tried the experiment and added a file to my music folder with samba. Then, like others, no more DLNA server found by Skifta, and also, http://192.168.50.1:8200 not accessible when enabled. All works OK after reboot/restart until any further files added to music folder which recreates the problem. Have never had this problem with earlier versions. Just adding my user experience to others to confirm there is a problem with minidlna that wasn't in earlier versions.

Hello RMerlin,

first of all, thank you for your awesome work with that router firmware!

I can assure psychbiz, I have the same problem with my RT-AC66U, so I downgraded to the last before firmware, and it works just fine.

You can find some of my inspection's results - what latenitetech suggested to test:
https://www.snbforums.com/threads/minidlna-config-unsuccessful.37459/#post-308594

Have a good work forward,
Lajos
 
That branch is mostly just so I don't fall too far behind in merges. 7266 has too many issues to be usable for a stable release. That's why it's on a separate branch.

That's really unfortunate. Anything major that's broken so far?

Also, AC3100 and 380.65 is working just fine for me. Haven't really pushed it to it's limits. Only issue for me so far is traffic classification is broken and showing everything as default for me as well.
 
That's really unfortunate. Anything major that's broken so far?

Bandwidth Limiter is broken (but fixable). And the wifi stability issues of 4180 are still there. Some people also reporting WAN issues, but no idea why that might be the case since I saw no change to that code.
 
I had a crash yesterday with a reboot message. The first line in the message has some wierd artifacts shown in hex: "derefere[xEF][xBE]u[xAA]at". Maybe cosmic rays? :p
 

Attachments

  • syslog snippet.txt
    11.1 KB · Views: 612
I had a crash yesterday with a reboot message. The first line in the message has some wierd artifacts shown in hex: "derefere[xEF][xBE]u[xAA]at". Maybe cosmic rays? :p

Router crashed while dealing with IPv6 traffic.
 
Ah, I see, a kernel issue then. That's something you don't usually patch right?

Right, I don't have the know-how to investigate that type of crash.
 
Hi Merlin, thanks for your great work. For me on a ac66u bandwith monitor (daily, per month) won't work. With older versions there were no problemes. Any ideas.
 

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top