cancel
Showing results for 
Search instead for 
Did you mean: 

PlusNet modem disconnect - hacked?

Mardler
Rising Star
Posts: 630
Thanks: 26
Registered: ‎01-07-2012

PlusNet modem disconnect - hacked?

Yesterday, my PN router disconnected.
I was asked for username & password but this didn't work. Initially, I was unable to access the router in my browser.
Rebooted and it's OK.
What is the likelihood of a router hack via a website virus or a neighbourhood hacker? WPA2 in use IIRC.
3 REPLIES 3
Chris
Legend
Posts: 17,724
Thanks: 600
Fixes: 169
Registered: ‎05-04-2007

Re: PlusNet modem disconnect - hacked?

I'm not going to say there's zero chance of hackers, however from the issue you've described this sounds more like the connection has dropped and the router is asking you to log back in after this.
Your connection logs show a short burst of disconnections on Saturday that may have been the cause.
Former Plusnet Staff member. Posts after 31st Jan 2020 are not on behalf of Plusnet.
Townman
Superuser
Superuser
Posts: 23,002
Thanks: 9,591
Fixes: 160
Registered: ‎22-08-2007

Re: PlusNet modem disconnect - hacked?

Quote from: Mardler
I was asked for username & password but this didn't work.

Which username & password?  Wink
Assuming you have the TG582n then if Web Browsing Intercept is set to enabled or auto, in the event of the connection being "down" the "intercept" page will prompt you for the PlusNet user connection details... in a screen which looks too darned much like the router admin logon page!  See http://192.168.1.254/helpfiles/b_index.htm?anchor=b_cfg_cfg&file=xml/bConfiguration6.xml for more information.  On this screen, you need the DSL logon details, not the router admin accounts details.
What is more interesting here is why the link is going down or not operating.  DNS look-up failures can give the appearance that the link is down when it is not.  If you see this again, look at the lights on the router before doing anything else and also look (via an explicit connection to 192.168.1.254) at the router log / connection status.  Indeed use the connectivity test here - http://192.168.1.254/cgi/b/connchk/?be=0&l0=2&l1=2&tid=CONN_CHECK1

Superusers are not staff, but they do have a direct line of communication into the business in order to raise issues, concerns and feedback from the community.

Mardler
Rising Star
Posts: 630
Thanks: 26
Registered: ‎01-07-2012

Re: PlusNet modem disconnect - hacked?

Thanks, Chris. That's what I thought might have happened but the graphic is very interesting. Great service, too.
Townman, yes that's the login screen I got. I'll keep your reply handy! Thanks.