MI424WR possibly corrupted firmware, strange user authentication logs
tsbadorrek
Newbie

My MI424WR-GEN3I router/modem (firmware ver. 40.21.24) has been showing some weird behavior in the logs. It's been going on for months, without seeming to cause any actual performance issues with the router:

Aug 30 20:03:48 2016Firewall InfoUser authentication failure489 failed login attempt(s) since last successful login
Aug 30 20:03:27 2016Firewall InfoUser authentication failureLogin rejected due to too many unsuccessful login attempts. Username: shell from 0.0.0.0
Aug 30 20:03:24 2016Firewall InfoUser authentication failureLogin rejected due to too many unsuccessful login attempts. Username: enable from 0.0.0.0
Aug 30 20:03:21 2016Firewall InfoUser authentication failureLogin rejected due to too many unsuccessful login attempts. Username: root from 0.0.0.0
Aug 30 20:02:46 2016Firewall InfoUser authentication failureLogin rejected due to too many unsuccessful login attempts. Username: shell from 0.0.0.0

This goes on and on and on.

I don't believe it's malware because the log says it's coming from 0.0.0.0. This seems to imply it's some sort of corruption in the router's firmware.

I've tried updating the firmware in the past, to no avail. I've tried again recently to download a firmware update, but everytime I go to the firmware upgrade page, it says "Upgrade file not found."

What's my best course of action? Should I just try to get Verizon to replace the box?

0 Likes