GT-AX11000 NVRAM how to block read ??

[ToXic_DST]

My son always crack my router and change parental control --always read nvram and read my new password (( how to block read NVRAM please help(

 

[ColinTaylor]

always read nvram and read my new password

This is highly unlikely, although not impossible. If your son is able to do this it would be a major security issue for Asus. You need to determine how he is doing this before you (or Asus) can fix the problem.

 

[ToXic_DST]

This i log please read his using linux mayby using option only specific IP
dont worry im change the password

 

[L&LD]

Are you using a computer he has access to make these changes? Are you writing the password down anywhere? Are you clearing your browser cache and/or rebooting your computer afterward?

The way he gets the password may not be directly from the router.

 

[ToXic_DST]

Nie zapisję niczego, hasło jest tylko w mojej głowie IP 192.168.1.55 jest his MIIX 300

 

[ColinTaylor]

This i log please read his using linux mayby using option only specific IP
dont worry im change the password

What was the last date and time your son changed the router?

Nie zapisję niczego, hasło jest tylko w mojej głowie IP 192.168.1.55 jest his MIIX 300

English only please.

 

[ToXic_DST]

sorry

It doesn't write anything, the password is only in my head

 

[ToXic_DST]

What was the last date and time your son changed the router?


English only please.

everything is in the log

 

[ColinTaylor]

everything is in the log

There is nothing particularly useful in the log. We need more clues. Knowing when your son changed the router would be a big help.

In the meantime go to System Log - General Log and change "Log only messages more urgent than" to "all".

 

[ToXic_DST]

now son login
Jun 7 20:03:12 dropbear[9450]: Login attempt for nonexistent user
Jun 7 20:28:19 miniupnpd[2414]: upnp_event_process_notify: connect(192.168.1.55:2869): Connection timed out
Jun 7 20:28:23 miniupnpd[2414]: upnp_event_process_notify: connect(192.168.1.55:2869): Connection timed out
Jun 7 20:28:23 miniupnpd[2414]: upnpevents_processfds: 0x7a0770, remove subscriber uuid:c6ee874c-ecb7-4a04-8ca1-7eca5746242a after an ERROR cb: http://192.168.1.55:2869/upnp/eventing/vwhqfcaxyi
Jun 7 20:29:18 miniupnpd[2414]: upnp_event_process_notify: connect(192.168.1.55:2869): Connection timed out
Jun 7 20:29:20 miniupnpd[2414]: upnp_event_process_notify: connect(192.168.1.55:2869): Connection timed out
Jun 7 20:29:29 miniupnpd[2414]: upnp_event_process_notify: connect(192.168.1.55:2869): Connection timed out
Jun 7 20:29:30 miniupnpd[2414]: upnp_event_process_notify: connect(192.168.1.55:2869): Connection timed out
Jun 7 20:29:30 miniupnpd[2414]: upnpevents_processfds: 0x7a0ea0, remove subscriber uuid:a78ce4a6-20a3-4812-9570-dbc52f9910d1 after an ERROR cb: http://192.168.1.55:2869/upnp/eventing/rulinwgbld

using dropbear ssh ???

 

[ToXic_DST]

and now log

Jun 7 20:44:08 syslogd started: BusyBox v1.25.1
Jun 7 20:44:08 kernel: klogd started: BusyBox v1.25.1 (2022-03-25 10:24:24 EDT)

Dropbear SSH

how to stop this

 

[L&LD]

Doesn't look like anyone is connected?

 

[ToXic_DST]

connected

 

[ToXic_DST]

and now
Jun 7 20:54:17 rc_service: httpds 26161:notify_rc restart_time;restart_leds;restart_usb_idle;restart_firewall;
Jun 7 20:54:17 ntpd: Stopped ntpd
Jun 7 20:54:17 dropbear[2077]: Early exit: Terminated by signal
Jun 7 20:54:17 syslogd exiting
Jun 7 20:54:18 syslogd started: BusyBox v1.25.1
Jun 7 20:54:18 kernel: klogd started: BusyBox v1.25.1 (2022-03-25 10:24:24 EDT)
Jun 7 20:54:18 miniupnpd[2414]: shutting down MiniUPnPd
Jun 7 20:54:18 ToXic: sh /opt/S50asuslighttpd.1 firewall-start
Jun 7 20:54:18 miniupnpd[17658]: HTTP listening on port 56174
Jun 7 20:54:18 miniupnpd[17658]: Listening for NAT-PMP/PCP traffic on port 5351
Jun 7 20:54:33 hour_monitor: daemon is starting

 

[ColinTaylor]

I think the quickest solution is for you to factory reset the router and set it up again. Don't use a backup file.

dropbear: You can disable SSH by going to Administration - System and setting Enable SSH to No. Change the Router Login Password again after disabling SSH.