UPC Router hacked???

tazzzZ

Ok basically as the title says i think i may have had my router hacked. The password for accessing my router has changed and i am unable to get back into it. I intend to reset it but i'm just curious has this happened to any1 else? and is it an easy process to input all the settings for the router or is it all done off the cd?

Decided to post here as i figure more ppl would have experienced this here.

JustAddWater

I wouldn't change the password but get in over Ethernet

I'd report it to UPC and maybe get the gaurds involved (something tells me they might fob you off)... Maybe you can see the computer name of who is connected and it might reveal who it is!

Its theft and should be dealt with! Plus anything illegal done by them on your network could come back to you

tazzzZ

i have looked on the network map and its only the 2 pc's at home that are connected. its weird. settings in my router have changed too. port forwarding etc! this is just weird.

does the firmware auto update or anythin? also will resetting the router resort everything to default??

tazzzZ

fixed it. for some reason the thing reset itself. silly me didnt cop on.

Spear

tazzzZ wrote: »

fixed it. for some reason the thing reset itself. silly me didnt cop on.

If it's the Cisco 2425 then even a power cycle of it does that.

JustAddWater

Might be only your 2 PC's now but he mightn't be on!

Firmware should auto update when you login to the router home page or should at least check every time, unless you've disabled that

Port forwarding wouldn't magically change so most likely someone has compromised your wi-fi

JustAddWater

Oh and if he hacked you once he will do again, so if you do reset your password, change the encryption bit rate to as high as it will go! 256 or more should do! Oh and WPA if you weren't using that already.

Netgears had MAC filtering, not good in it's own at all but with a WPA key would slow him down a bit


If you need help tell us your router model

Johnny11

It happens a lot actually, most of the routers have more then one login to let someone remotely hack your router , like Vodafone fibre , Vodafone - Vodafone , Admin-admin1234 and superuser I believe most isp routers does the same thing

ED E

Johnny11 wrote: »

It happens a lot actually, most of the routers have more then one login to let someone remotely hack your router , like Vodafone fibre , Vodafone - Vodafone , Admin-admin1234 and superuser I believe most isp routers does the same thing

You dont quite understand it.

Those CPE management passwords are only enabled from wan when the device receives a "knock" from the relevant ISPs management server. The rest of the time the allocated port is dead.

Johnny11

ED E wrote: »

You dont quite understand it.

Those CPE management passwords are only enabled from wan when the device receives a "knock" from the relevant ISPs management server. The rest of the time the allocated port is dead.

I hope so