[admin login failure] from source 192.168.1.6

[MNN8TV]

I have been getting some weird things on my router lately. I just give the one issue first. My router log is showing [WLAN access rejected: incorrect security] from MAC address xx:99:😱c:b3:7e:d3, Wednesday, March 16, 2016 12:24:26 - but my laptop is always connected to wifi and doesn't seem to be slow or interrupted. I am also getting this: [admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:36. This is repeating itself like 7 times a second for like 15 seconds or so. Is someone trying to hack into my router? I have a complicated router password as well as network password. I have never seen this before. Now, I will say that I just recently gave my ISP back their rented modem and bought a Netgear modem. This issue seems to have started "maybe" since connecting the new modem. Anyone have any ideas? I am semi computer literate. Appreciate the help. I am concerned that someone has a software that is repeatedly trying to get into my router. Thanks in advance.

 

[popatim]

Is the source IP = your laptop?

 

[MNN8TV]

My laptop is 192.168.1.5 and the admin failure ends in 6

 

[MNN8TV]

This is what my log looks like with the admin logon failure:

[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:37
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:37
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:37
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:37
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:37
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:37
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:36
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:36
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:36
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:36
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:36
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:36
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:36
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:36
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:36
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:36
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:36
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:36
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:35
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:35
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:35
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:35
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:35
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:35
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:35
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:35
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:35
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:35
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:35
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:35
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:34
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:34
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:34
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:34
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:34
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:34
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:34
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:34
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:34
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:34
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:34
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:34
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:33
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:33
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:33
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:33
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:33
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:33
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:33
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:33
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:33
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:33
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:33
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:33
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:32
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:32
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:32
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:32
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:32
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:32
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:32
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:32
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:32
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:32
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:32
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:31
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:31
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:31
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:31
[admin login failure] from source 192.168.1.6, Wednesday, March 16, 2016 08:16:31

 

[MNN8TV]

And this is my cell phone mac address which is connected all the time but this keeps showing up on the log. [WLAN access rejected: incorrect security] from MAC address xx:99:😱c:b3:7e:d3, Wednesday, March 16, 2016 12:24:26

 

[popatim]

Which exact router do you have?
You should be able to determine the mac address for that ...6 device and then block it from even logging in again.

 

[MNN8TV]

Sorry didn't see your response which I greatly appreciate and I didn't get notified of your response. Will double check my settings. I use a Netgear Wndr4300. The Admin Login Failure doesn't seem to be getting in but it sure seems like someone is trying due to many times per second they are hitting me. Here is the most recent attempts below. I don't see any MAC address listed to that ip. The weird thing also is that the attempts were at around 8am one day and another day it was around 7:30am, so I started disconnecting for a couple days from my network at night and would turn on later in the morning an there were no attempts. I also changed my routers password. Now this time they are doing it in the evening. I don't think I am able to block individual mac address's on my router. I have checked that out for some of the other random network login attempts that do show an unknown mac address.

[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:05
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:05
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:05
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:05
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:05
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:05
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:05
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:05
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:05
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:04
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:04
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:04
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:04
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:04
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:04
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:04
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:04
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:04
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:04
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:04
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:03
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:03
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:03
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:03
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:03
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:03
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:03
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:03
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:03
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:03
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:03
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:03
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:02
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:02
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:02
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:02
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:02
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:02
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:02
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:02
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:02
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:02
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:02
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:02
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:01
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:01
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:01
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:01
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:01
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:01
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:01
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:01
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:01
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:01
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:01
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:01
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:00
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:00
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:00
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:00
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:00
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:00
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:00
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:00
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:00
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:00
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:53:00
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:52:59
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:52:59
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:52:59
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:52:59
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:52:59
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:52:59
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:52:59
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:52:59
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:52:59
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:52:59
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:52:59
[admin login failure] from source 192.168.1.6, Tuesday, March 22, 2016 20:52:59

 

[MNN8TV]

I don't know if this could have anything to do with it. But, I recently got rid of my rental modem and bought a Netgear modem. That is when this started. Not sure if related or just coincidence. Though I would mention.

 

[popatim]

Advanced>Security> Access Control
Should show the pc's name, IP and mac address

Turn on access control and selct the devices you want to Allow and then click the allow button (if they all aren't allowed by default)
Select that ....6 device and click Deny/Block

You might want to Block all New devices also but remember it will be a little extra work on your end to get new devices working as you will have to come back to this screen and "Allow" them.

Should the ...6 device be something in your residence then I definitely suggest a full security/anitvirus sweep be done on it.

 

[MNN8TV]

Advanced>Security> Access Control
Should show the pc's name, IP and mac address

Turn on access control and selct the devices you want to Allow and then click the allow button (if they all aren't allowed by default)
Select that ....6 device and click Deny/Block

You might want to Block all New devices also but remember it will be a little extra work on your end to get new devices working as you will have to come back to this screen and "Allow" them.

Should the ...6 device be something in your residence then I definitely suggest a full security/anitvirus sweep be done on it.

 

[MNN8TV]

I do have Access Control on and have it set to deny any new devices without my changing it to "allow devices". It has been set that way for a while. I think I may have just figured it out. There is a list on the router when devices aren't currently connected to the network that I have accepted. This list shows only mac address' and no ip so that is why I couldn't figure it out. It's my renter. She never complained she couldn't connect but she doesn't use her laptop much, so this all kinda makes sense now. My renter needed me to open the router to allow her new kindle. Waa laa, that IP...6 showed up with her laptop mac address in the active devices that are currently online. So now I know it is her laptop. I just never have seen that sort of message log before, even tho it showed her laptop on my list. So i think that is solved. I will watch the log tonight and if I don't get all those login attempts I will know it was resolved.

I have one more question that I asked earlier in this post about my cell phone but not sure if I can talk about 2 different issues. If not just tell me to do a new post. My cell phone is connected to the internet and is an attached device to router and shows active on the network log. But randomly I get this message. [WLAN access rejected: incorrect security] from MAC address xx:99:xc:b3:7e:x3, Wednesday, March 23, 2016 13:35:27. My cell shows me also connected to my network. Do you have any idea why I would be getting this rejection message when it is connected?

 

[popatim]

No clue. Might be best to start a new thread in Mobile Computing or Networking.

 

[MNN8TV]

Thank you for your help