GT-AX6000 - Memory Leak? Hacked?

[AntonK]

No, AiProtection 100% off.

If I recall correctly I read it can slow down connections (messes with Flow Cache and/or Runner).
Privacy wise I'm not concerned, I'am tracked 24/7 by my phone, apps, browser, etc, so 1 more tracking wouldn't hurt that much, but I don't want any hog slowing down my speeds (600/600).

Do you advice otherwise?

I'm not a technician guy like many others here, but if you're getting infected and re-infected with something, possibly coming from LAN devices, AI protection is meant to combat (or help combat) that sort of activity. I don't believe Flow Cache / Runner are effected by AI Protection.

 

[bluzfanmr1]

No, AiProtection 100% off.

If I recall correctly I read it can slow down connections (messes with Flow Cache and/or Runner).
Privacy wise I'm not concerned, I'am tracked 24/7 by my phone, apps, browser, etc, so 1 more tracking wouldn't hurt that much, but I don't want any hog slowing down my speeds (600/600).

Do you advice otherwise?

I have the same router and the same internet speeds and AiProtection works fine and in no way slows anything down or messes with those settings.

 

[Tech9]

I was also interested in AiProtection eventual actions, but... next time.

 

[jerry6]

Ai protection eats ram that is about all , on or off makes no dif in line speed

 

[elbubi]

Thanks for your inputs regarding AiProtetcion.
If it not "harmfull" regarding router/line performance, then I may give it a chance.
Privacy wise is not something that I "like"; but I can live with it.

For what I've read here in the forums, is looks like its not a much beloved feature...

Thanks once again.

 

[sfx2000]

I believed SSH was pretty safe, I use it mostly to check TOP (for the abnormal behaviour on the last months and previous hacks), and to check trifles like AMTM, added cronjobs, ARP table, etc.
I do also often use winSCP to check for something abnormal on scripts or ovpn (given my last hack experience).
Should I do something other way?

Well - think about this...

every service you open up on your router exposes your bastion/fortress...

1) SSH - fairly secure perhaps...
2) VPN host - could be secure, but depends on how it's configured
3) USB/Samba Host - yeah, getting warmer...

It's all about reducing the threat surface - can't hack something that isn't running...

Consider perhaps running something behind the router - could be something as simple as a RPi - OVPN/WG host can run there, along with a SSH jump in box, and SSH there is the big-boy version with OpenSSH, not dropbear... and on an RPi, you can run a much newer version of Samba with more capability and better security.

 

[elbubi]

Thanks for your time SFX

 

[jerry6]

SFX this is it
It's all about reducing the threat surface - can't hack something that isn't running...

 

[elbubi]

AiProtection enabled, as far as I can tell I don't see any noticeable speed drop (Runner and Flow Cache remained enabled)
I'm not (that) crazy, I remembered reading AiProtection was not compatible with those speed boosters (example 1 - example 2)

Those two bad processes are still "vanished", I look several times a day but no news yet.

 

[Squall Leonhart]

Please, don't jump all over me, I know that unused ram is wasted ram.

this is a myth fabricated by morons in the early vista days justifying systems with 4 or less GB ram, wasted ram is having 100% attributed to pointless processes that provide no benefit or function to the device.

I'm not (that) crazy, I remembered reading AiProtection was not compatible with those speed boosters (example 1 - example 2)

it operates just fine with them.

 

[Tech9]

I remembered reading AiProtection was not compatible

Your example 1 is totally unrelated to AiProtection, example 2 depends on the hardware used. GT-AX6000 can handle 600Mbps ISP with AiProtection enabled without too much performance impact.

 

[shabbs]

Botnet?

Massive China-state IoT botnet went undetected for four years—until now

75% of infected devices were located in homes and offices in North America and Europe.

arstechnica.com

 

[Tech9]

Botnet?

Keep it running, FBI will fix it for you.

 

[Viktor Jaep]

I'll tell you what ... My GT-AX6000 has spontaneously rebooted at least 3x today. Coincidence? It's never done this before. Will be diving into some logs tonight. <Sigh>

 

[Kingp1n]

I'll tell you what ... My GT-AX6000 has spontaneously rebooted at least 3x today. Coincidence? It's never done this before. Will be diving into some logs tonight. <Sigh>

I had similar issues in the past and mainly noticed when I have too many scripts (3rd party) running at a time. I have slowly removed scripts that I don't need and monitor the RAM mainly when it's running above 90%.

I recently just installed Skynet & Unbound again and will be monitoring the router. So far so good and it seems what's installed now the router can handle it for now.

Botnet?? Have to check further....

 

[Tech9]

My GT-AX6000 has spontaneously rebooted at least 3x today.

The FBI silently entered through the back door, killed the CCP bot and locked the back door without waking up the Ai stuff. Nothing to worry about.

 

[Viktor Jaep]

The FBI silently entered through the back door, killed the CCP bot and locked the back door without waking up the Ai stuff. Nothing to worry about.

Thanks FBI! Jeez. My system was much more stable with the botnet running!

 

[Viktor Jaep]

I had similar issues in the past and mainly noticed when I have too many scripts (3rd party) running at a time. I have slowly removed scripts that I don't need and monitor the RAM mainly when it's running above 90%.

I recently just installed Skynet & Unbound again and will be monitoring the router. So far so good and it seems what's installed now the router can handle it for now.

Botnet?? Have to check further....

It's just weird that it just did it out of the blue. It has *NEVER* once spontaneously rebooted on me... and I'm running fairly lean - skynet, diversion, unbound, merlinAU, vpnmon-r3, tailmon... It seems to be handling the RAM just fine.

Well, nothing in my logs... I'll have to catch it when it happens next time to get some better logs. ;(

 

[sfx2000]

The FBI silently entered through the back door, killed the CCP bot and locked the back door without waking up the Ai stuff. Nothing to worry about.

At the same time - when debugging issues like this, best to go back to square one and remove the third party scripts and get a stable device - nothing against the third party devs, but keeping things simple and stable is the priority - once stable, one can add them back in one at a time...

 

[Tech9]

Thanks FBI! Jeez.

They may have installed own friendly bot monitoring for future unfriendly bots. Perhaps it’s time for BOTMON?