Community discussions

MUM Europe 2020
 
kojikabuto
just joined
Topic Author
Posts: 2
Joined: Thu Feb 08, 2018 8:31 am

DEVICE HACKED

Thu Feb 08, 2018 9:17 am

Hello everyone

I was testing a new router RB2011UiAS-2HnD-IN and I forgot to enter password : ( (my bad) I suffered an attack by telnet and someone hacked the router, changed the password and changed the identity to HACKED.
I reset the router, restored the backup, put a password, created a new user and deleted admin, and also disabled the services ssl, telnet, ftp, www
apparently there have been no connection attempts in 24 hours
BUT, in the console, it looks like the message DEVICE HACKED - ACCOUNT ADMIN HAD UNSAFE PASSWORD.

Now I'm not in front of the router, but I think there was a new file maybe can be a /system note ? (i have just realized)

Is my router still safe?

thanks in advance


PS: I'm totally amateur
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 24337
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: DEVICE HACKED

Thu Feb 08, 2018 10:07 am

Post a screenshot of the message, we'll see where the message came from
No answer to your question? How to write posts
 
kojikabuto
just joined
Topic Author
Posts: 2
Joined: Thu Feb 08, 2018 8:31 am

Re: DEVICE HACKED

Thu Feb 08, 2018 5:34 pm

Here is
Captura de pantalla 2018-02-08 a las 16.29.57.jpg
You do not have the required permissions to view the files attached to this post.
 
User avatar
TomjNorthIdaho
Forum Guru
Forum Guru
Posts: 1007
Joined: Mon Oct 04, 2010 11:25 pm
Location: North Idaho
Contact:

Re: DEVICE HACKED

Thu Feb 08, 2018 7:41 pm

reset it to default config , then re-program it.

Or , possibly , you can do an /export and look at the config and fix it.

I myself would just default the config then re-configure it.

North Idaho Tom Jones
 
User avatar
CZFan
Forum Guru
Forum Guru
Posts: 1460
Joined: Sun Oct 09, 2016 8:25 pm
Location: South Africa, Randburg
Contact:

Re: DEVICE HACKED

Thu Feb 08, 2018 8:04 pm

Personally I would netinstall it, not just reset to default
MTCNA, MTCTCE, MTCRE & MTCINE
 
User avatar
juliokato
Member Candidate
Member Candidate
Posts: 229
Joined: Mon Oct 26, 2015 4:27 pm
Location: Brazil

Re: DEVICE HACKED

Thu Feb 08, 2018 10:13 pm

Just delet the sys-note.txt file.
Or create your sys-note.txt.
I apologize my grammatical errors, my english not so good, I am not a native speaker.
Wiki is maintained in English. I use Google translator. 8)
 
esencialatina
just joined
Posts: 1
Joined: Sun Sep 16, 2018 9:24 pm

Re: DEVICE HACKED

Sun Sep 16, 2018 9:27 pm

I have Exactly the same issue in 02 differents offices.................... Some is wrong with Mikrotik.

WE NEED HELP..... Mikrotik
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 24337
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: DEVICE HACKED

Mon Sep 17, 2018 12:17 pm

Guys, if your device has no firewall and winbox is open to the world, your device is in danger. Please upgrade, change password, and then inspect every line of configuration for things you don't recognize. Remove everything your don't recognize, then implement a secure firewall according to the manual.
No answer to your question? How to write posts
 
datispro
just joined
Posts: 4
Joined: Mon Sep 17, 2018 11:19 am
Contact:

Re: DEVICE HACKED

Mon Sep 17, 2018 12:32 pm

you can solve by create your sys-note.txt.
We thinks Mikrotik is the best solution for network Jobs.
Mikrotik Course - mikrotik

Who is online

Users browsing this forum: Google [Bot] and 94 guests