IDNetters Forums

Technical News & Discussion => IDNet Help => Topic started by: Matt M on May 07, 2009, 21:32:53

Title: Netgear DG834PN Hacked?
Post by: Matt M on May 07, 2009, 21:32:53
Hi All
Just querying a couple of thigs
i noticed a few odd things on the log of my router
and the lost all its settings and locked me out had to do a full reset and set it back up again

Thu, 2009-05-07 19:07:58 - UDP Packet - Source:63.231.252.74 Destination:91.135.3.186 - [PORT SCAN]
Thu, 2009-05-07 19:08:00 - UDP Packet - Source:63.231.252.74 Destination:91.135.3.186 - [PORT SCAN]Thu, 2009-05-07 19:48:59 - TCP Packet - Source:192.168.0.10,50581 Destination:wy-in-f102.google.com,80 - [BLOCK]

There were a couple more before that were trying to connect to rdc

Is there any chance the hacker added somthing to the firmware ?
Title: Re: Netgear DG834PN Hacked?
Post by: Sebby on May 07, 2009, 21:35:14
I'd say it's unlikely that someone did something to the router, Matt. Port scans are normal, and the fact that the router has logged it just shows that the firewall is doing its job.

If you're concerned, I'd head over to the Netgear site and get the latest firmware, then flash the router, and set it up again. That way you can be certain nothing has been altered. :)
Title: Re: Netgear DG834PN Hacked?
Post by: Matt M on May 07, 2009, 21:40:23
i was doing that while you were responding  ;D
its was just odd that that apeared and the router lost all its settings drop down lists and everything were blank no options at all
Title: Re: Netgear DG834PN Hacked?
Post by: Sebby on May 07, 2009, 21:41:30
I agree it's odd, but it's probably just a coincidence. By updating the latest firmware, you can be certain you have a clean firmware, and it'll be secure and up-to-date. :)
Title: Re: Netgear DG834PN Hacked?
Post by: Rik on May 07, 2009, 22:07:53
I agree with Seb, Matt, the log just shows the router doing its job.