cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
6143
Views
5
Helpful
17
Replies

RV340 Router Issue

Lee Cox
Level 2
Level 2

I am thinking my router was hacked last night right after midnight.  Here what I have.  My PC web pages stopped working.  I could ping 8.8.8.8.  My PC is pointing to the router for DNS. I am thinking DNS was changed on the router.  I have firewall rules to block any DNS but 8.8.8.8 and my ISP which have been in place since I set this router up.  When I looked under firewall on the RV340 remote was turned on and I cannot turn it off.  I have included a picture.  I changed the remote to a couple of non-useable IP addresses.  Also looking under system summary VPN status I see 1 VPN has been setup.  I have never setup a VPN on this device. Looking under VPN status the configs do not show.  I did post a message a couple weeks ago about seeing VPN traffic in the logs when I had no VPN setup.

I seem to have an issue posting pictures.  The upload does not work. Since I cannot seem to upload pictures I will tell you under VPN status under System summary it is showing 1 L2TP, 1 PPTP, and 1 SSLVPN.  I have no logs as they have already rolled off.  My logs goes back to 3:00 am.  It around midnight.  Probably planned that way.

I was lucky I had ACLs to block other DNS servers before one of my PCs was hacked.

 

So I guess re-flash and reconfigure?

17 Replies 17

I have this same issue. It really makes the 'Email Logs' function unusable. Is there any updat from Cisco? I am running the latest firmware as of a check last night.

Thanks!

 

I just recently lost access to a web page site.   I tried a nslookup and was getting request timed out.  I rebooted the RV340 router and it fixed it.  After the reboot I was able to access the site and nslookup started working.   Why would rebooting the router fix DNS.   I asked and the web site was never down.

 

Any ideas?  Do you think this is related?