Sign in with
Sign up | Sign in
Your question
Solved

Am I being hacked?

Last response: in Networking
Share
August 2, 2013 5:09:16 AM

Everyday I am seeing failed attempts in my routers logs to login.

"Invalid username. Username: root from 0.0.0.0"

Am I being hacked, or is something on my network trying to get to my router? Honestly, I would think a hacker would have an easier time getting in, that's why I am under the impression that something else is trying to get in. Any ideas?

It is frustrating, since when I want to get in and mistype the complicated password, it locks me out, due to multiple failed attempts.

More about : hacked

August 2, 2013 5:23:57 AM

iiipgciii said:
Everyday I am seeing failed attempts in my routers logs to login.

"Invalid username. Username: root from 0.0.0.0"

Am I being hacked, or is something on my network trying to get to my router? Honestly, I would think a hacker would have an easier time getting in, that's why I am under the impression that something else is trying to get in. Any ideas?

It is frustrating, since when I want to get in and mistype the complicated password, it locks me out, due to multiple failed attempts.


You most likely live close to someone who doesn't have internet and they are trying to figure out the password by entering random words. Most likely I would say it's a kid that's doing that.
m
0
l
August 2, 2013 5:32:07 AM

0.0.0.0 isn't a normal IP - that's likely inside your router. I'd guess that there's a process that's gotten corrupt or something.

If you update the firmware do the messages stop appearing?
m
0
l
Related resources
August 2, 2013 6:04:02 AM

theonerm2 said:
iiipgciii said:
Everyday I am seeing failed attempts in my routers logs to login.

"Invalid username. Username: root from 0.0.0.0"

Am I being hacked, or is something on my network trying to get to my router? Honestly, I would think a hacker would have an easier time getting in, that's why I am under the impression that something else is trying to get in. Any ideas?

It is frustrating, since when I want to get in and mistype the complicated password, it locks me out, due to multiple failed attempts.


You most likely live close to someone who doesn't have internet and they are trying to figure out the password by entering random words. Most likely I would say it's a kid that's doing that.


But this is someone trying to get into my routers login, not my wifi.
m
0
l
August 2, 2013 6:04:34 AM

Someone Somewhere said:
0.0.0.0 isn't a normal IP - that's likely inside your router. I'd guess that there's a process that's gotten corrupt or something.

If you update the firmware do the messages stop appearing?


I am up to date on my firmware.

m
0
l
August 2, 2013 6:08:08 AM

Then can you reinstall it - it may be corrupt.
m
0
l

Best solution

August 2, 2013 6:14:18 AM

iiipgciii said:
Everyday I am seeing failed attempts in my routers logs to login.

"Invalid username. Username: root from 0.0.0.0"

Am I being hacked, or is something on my network trying to get to my router? Honestly, I would think a hacker would have an easier time getting in, that's why I am under the impression that something else is trying to get in. Any ideas?

It is frustrating, since when I want to get in and mistype the complicated password, it locks me out, due to multiple failed attempts.


Root is your computer. 0.0.0.0 is a false IP address. Noone is trying to hack you. If you want to be completely 100% sure that you are safe, unplug your modem from your router. Reset your router back to default settings, and reconfigure it. Make sure that under WiFi (if enabled) you are using WPA2-PSK as an encryption, and make your password strong. Hide your SSID if you can, or use a MAC Filter. Once your router has been reconfigured, plug it back into the modem and reconnect to it from your computer.

You should be in the clear now, but if you still find that its saying "root" is trying to get access to your router, you may have malware or a virus in your computer that may be trying to access the router to create a backdoor. At this point, i would download and run an antivirus program in safemode.
Share
August 2, 2013 6:18:50 AM

If he's running Windows, there is no 'root'.

Root is the superuser (think admin but more so) on Linux/Unix systems. The router is likely running a variant of Linux.
m
0
l
August 2, 2013 6:39:09 AM

Someone Somewhere said:
If he's running Windows, there is no 'root'.

Root is the superuser (think admin but more so) on Linux/Unix systems. The router is likely running a variant of Linux.


I understand that Root is the superuser for linux, but 0.0.0.0 is assigned to a host when the initial DHCPDISCOVER request has failed. If the router was in the middle of doing something when you tried to connect, its DHCP server could have caused a small bug to occur on the routers end. If you are connected now, and find nothing wrong, you should be fine.

And btw, windows DOES have a root. It's a filepath, not a user.
m
0
l
August 2, 2013 3:30:37 PM

Yeah, but a filepath can't log into something. Sorry, I should have said a root account.

Isn't that 169.254.x.x?
m
0
l
August 3, 2013 3:15:34 AM

I think that it is not hack and might be some issue with your router. You might want to consider flashing the firmware or get a new one.
m
0
l
August 3, 2013 3:35:31 AM

Reflash the firmware, and do a factory reset (you'll need to re-enter your ISP logins).
m
0
l
!