Is my plusnet router being Hacked?
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Help with my Plusnet services
- :
- My Router
- :
- Is my plusnet router being Hacked?
Is my plusnet router being Hacked?
03-12-2016 1:50 PM - edited 03-12-2016 1:51 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Hello community,
I have the new plusnet router and I am on the business package. Looking at the below logs, I get the impression that someone is remotely logging into my router? Is this a hack? 195.154.50.178 is particularly disturbing to me because as soon as I put it on google, I see tones of people talking about it being a hacker's well know ip.
13:20:28, 03 Dec. | IN: BLOCK [16] Remote administration (TCP [195.154.50.178]:44296->[81. |
11:13:09, 03 Dec. | ath10: STA a4:db:30:81:72:95 IEEE 802.11: Client associated |
11:04:37, 03 Dec. | IN: BLOCK [16] Remote administration (TCP [123.31.34.213]:62120->[81.174.143.210]:22 on ppp3) |
11:04:31, 03 Dec. | IN: BLOCK [16] Remote administration (TCP [194.74.181.123]:35340->[81.174.143.210]:443 on ppp3) |
10:55:11, 03 Dec. | IN: BLOCK [16] Remote administration (TCP [74.82.47.55]:46157->[81.174.143.210]:443 on ppp3) |
10:48:59, 03 Dec. | IN: BLOCK [16] Remote administration (TCP [23.254.198.242]:41188->[81.174.143.210]:80 on ppp3) |
10:46:16, 03 Dec. | IN: BLOCK [16] Remote administration (TCP [194.74.181.123]:59628->[81.174.143.210]:80 on ppp3) |
10:41:08, 03 Dec. | IN: BLOCK [16] Remote administration (TCP [117.3.197.218]:52515->[81.174.143.210]:22 on ppp3) |

Re: Is my plusnet router being Hacked?
03-12-2016 2:01 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
As I read it I see there is BLOCK instruction so it would appear that someone is trying to gain access via HTTP / HTTPS and SSH but are being blocked by the router.
Re: Is my plusnet router being Hacked?
03-12-2016 2:11 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
If the "BLOCK" log entry implies a successful block action, then I'm relieved and definately inclined to agree with you. I have also raised a case with plus-net support. I'll see what their take on this is too.
Cheers for responding so quickly 🙂
Much appreciated

Re: Is my plusnet router being Hacked?
03-12-2016 2:20 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
@agbaka - Well if you don't ask you don't get, you are more than welcome.
Re: Is my plusnet router being Hacked?
03-12-2016 2:26 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Re: Is my plusnet router being Hacked?
10-12-2016 10:39 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Looking at router logs can be scarey. In the last few minutes I had attempts at unauthorised access from S. Korea, France, China and Chicago. You can become quite paranoid if you look at it too much, which is probably a good thing.
In general, your router firewall should drop all packets which originate from the internet as opposed to packets coming in response to your actions, like web browsing. Also remote admin should be explicitly disabled unless you have a VERY good reason to need to reconfigure your router when you are not at home. I don't know if your router allows it but I have mine set up to allow admin only from 2 specified IP addresses on my home (wired) network.
There are sites which will probe your internet IP and see if there are any holes in your filewall (ie open ports etc). Ideally the router will not respond at all and will be invisible to unwanted visitors.
Re: Is my plusnet router being Hacked?
10-12-2016 8:27 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Help with my Plusnet services
- :
- My Router
- :
- Is my plusnet router being Hacked?