Menu
What's new
By:
Filters Better Search

Search results

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

  1. Rubenel

    Possibly been hacked. Need assistant from senior users.

    Thanks Collin for the post. Sent from my SM-G950U using Tapatalk
  2. Rubenel

    Possibly been hacked. Need assistant from senior users.

    It may be, but I did turn off this feature once I deleted the app. This is an exploit in the firmware. Sent from my SM-G950U using Tapatalk
  3. Rubenel

    Possibly been hacked. Need assistant from senior users.

    Thanks for posting. I had SSH and WAN access turned off. This is an exploit in the firmware. Sent from my SM-G950U using Tapatalk
  4. Rubenel

    Possibly been hacked. Need assistant from senior users.

    I've formatted the disk and will back up my MacOS once again. Thanks. Sent from my SM-G950U using Tapatalk
  5. Rubenel

    Possibly been hacked. Need assistant from senior users.

    Yes sorry. I wasn't 100 percent. I believe I said Asian region in one of my post. I've got the router operating after a wipe and refresh of the firmware and update. Sent from my SM-G950U using Tapatalk
  6. Rubenel

    Possibly been hacked. Need assistant from senior users.

    Anyways, thanks Merlin for the attention and contributions. I'm going to wipe the router and update. Sent from my SM-G950U using Tapatalk
  7. Rubenel

    Possibly been hacked. Need assistant from senior users.

    They got into the router, assigned their PPTP VPN, shut down my VPN and enabled AiDisk. They were after my 1TB attachment. Luckily, AiDisk doesn't work in a multi-nat environment, so their effort wasn't fruitful. Sent from my SM-G950U using Tapatalk
  8. Rubenel

    Possibly been hacked. Need assistant from senior users.

    Thanks
  9. Rubenel

    Possibly been hacked. Need assistant from senior users.

    I need the router to be in operations again. I am going to wipe and reload the firmware and update. I will report back with any suspicious activities. Thanks guys.
  10. Rubenel

    Possibly been hacked. Need assistant from senior users.

    Outside of the firmware not being up to date, is there any way to confirm this isn't a vulnerability in the firmware that may not be patched as of today. Can I perform a system dump, if possible? SSH, WAN ACCESSS were both off. How can I determine how they gained access to the router? Sent...
  11. Rubenel

    Possibly been hacked. Need assistant from senior users.

    I didn't setup the PPTP VPN, not did I activate the AiDisk or the PPTP VPN. Also when I looked at the services, ssh and WAN access is off. So who gain access found a vulnerability in the firmware. I'm going to contact the creator of Merlin to let him know. This has to be patched. Sent...
  12. Rubenel

    Possibly been hacked. Need assistant from senior users.

    More..... Sent from my SM-G950U using Tapatalk
  13. Rubenel

    Possibly been hacked. Need assistant from senior users.

    More pictures. Sent from my SM-G950U using Tapatalk
  14. Rubenel

    Possibly been hacked. Need assistant from senior users.

    Here is the syslog along with other photos of the current configurations. https://drive.google.com/file/d/1C5pW4gJnWHj-7-i3xfAU2O4aaacFd2Or/view?usp=drivesdk Sent from my SM-G950U using Tapatalk
  15. Rubenel

    Possibly been hacked. Need assistant from senior users.

    My logs show Feb 11 too..... Logs will be posted. Sent from my SM-G950U using Tapatalk
  16. Rubenel

    Possibly been hacked. Need assistant from senior users.

    Hi colin, The access from WAN was enabled automatically because I used the app on my smartphone to access the router. I'll have system logs ready in 15 minutes. Thanks. Sent from my SM-G950U using Tapatalk
  17. Rubenel

    Possibly been hacked. Need assistant from senior users.

    Hey Collin, I did setup the router to be behind my FiOS router, so I am operating behind a NAT. My other issue is that I placed the Asus IP address in the DMZ of the FiOS router. I did not setup the DDNS, or the PPTP account, that was setup by the intruder. I have the system logs...
  18. Rubenel

    Possibly been hacked. Need assistant from senior users.

    Thanks for the contribution. I'll grab the system logs and all valuable info and post it on here for analysis. Sent from my SM-G950U using Tapatalk
  19. Rubenel

    Possibly been hacked. Need assistant from senior users.

    Admins, can we move the thread to Asus Merlin. Thanks. Sent from my SM-G950U using Tapatalk
  20. Rubenel

    Possibly been hacked. Need assistant from senior users.

    Hey guys, I'm using my Asus AC68u with 380.69 firmware. I've logged on today and noticed my language was changed to the Asian region. Someone also set up a PPTP and a DDNS. I have the router offline, but I haven't altered anything. Can someone assist me. I can send logs and other info to...
Top