This topic

Why is BT Hacking into my WiFi Network All Day and Night? Thought it was hackers

Chareve — Wed, 24 Jul 2024 22:16:16 GMT

Why is BT Hacking into my WiFi Network All Day and Night? Thought it was hackers But it’s a mix of them AND yourselves, terrible slow network, hanging, crashing, dns errors and web pages, but in the technical logs of the hub I can clearly see your by service workers constantly broadcasting and joining my network, sitting on my router monitoring god knows what and strange sip connections and requests, it’s so plain to see and blatant that my son actually showed me every one of your actions logged and what they mean in order over a very long period constantly nearly all day every day? These are not normal feature command logs, please explain?

Re: Why is BT Hacking into my WiFi Network All Day and Night? Thought it was hackers

Madpeter — Thu, 25 Jul 2024 04:09:46 GMT

have you opt'd out of BT wifi?
https://www.bt.com/help/broadband/what-is-bt-wi-fi-and-how-do-i-get-it-

you can control if your part of the wifi network via your MyBT.
as it could be just noise from the upkeep of that.

have you changed your wifi password to something easy to guess?

Re: Why is BT Hacking into my WiFi Network All Day and Night? Thought it was hackers

Chareve — Thu, 25 Jul 2024 19:47:37 GMT

Thankyou mad Peter I will buy the logs clearly show daily bt workers connecting(and secretly trying to connect) on different devices whos ip addresses link back to by headquarters on the Whois database and also blatant connections, monitoring and data retrieval back to a remote location multiple times a day, always confirmed with browser and dns resolution freezing along with app and browser crashing, strange web browser error and dns codes along with these “UFO” devices which appear at the exact moment these issues appear, even knocks my smart Yvonne box off line when he connects to it that’s where one of them was hiding for a long while spoofing the Mac and up address of it, only confirmed it when I found and managed to chase him from internet to to iPhone to laptop and geo located his longitude and latitude which was usually either in Thailand or Croatia under a fake shell company website which looked like it had been built in 5 minutes and would disappear from web searches and browser shortly after,

I am not a conspiracy theorist but the logs and config clearly show all this taking place either at the same time, along side or working independently of the BT daily infiltration, my internet speed and hanging browsers and apps are at the speeds of old 90,s dial up days, also have the wire shark capture logs to accompany and prove all this as well

So BT? WILL YOU PLEASE TELL ME WHAT YOUR DOING ON MY ROUTER AND WI-FI CONTINUOUSLY DAILY APPARENTLY BREACHING NOT ONLY OUR CONTRACT BUT POSSIBLY MY HUMAN RIGHTS

Re: Why is BT Hacking into my WiFi Network All Day and Night? Thought it was hackers

Chareve — Sun, 28 Jul 2024 20:04:05 GMT

Please will someone help or answer? Thankyou

Re: Why is BT Hacking into my WiFi Network All Day and Night? Thought it was hackers

WSH — Sun, 28 Jul 2024 20:48:32 GMT

This reply is intended as a courtesy so please don’t shoot the messenger.

This is only a customer-to-customer help forum. The people you are talking to, including myself, are fellow customers. You are not talking directly to BT. The only BT employees here are the moderators, who are a very small team and very busy.

If what you are saying is true then it goes way beyond anything people on here can advise on. With the tone you’ve chosen to adopt, I suspect you are unlikely to get any further response.

Re: Why is BT Hacking into my WiFi Network All Day and Night? Thought it was hackers

TimCurtis — Mon, 29 Jul 2024 07:54:11 GMT

@Chareve

Firstly, it would be a good idea if you posted some of the details from the log showing us what you're talking about.

Secondly, I get upwards of 50 attempts to login in to my router a day and I'm sure that's not that unusual. Fortunately on my router I can prevent any access from the internet for login attempts.

Re: Why is BT Hacking into my WiFi Network All Day and Night? Thought it was hackers

naylor2006 — Mon, 29 Jul 2024 08:48:47 GMT

Please post your logs/findings, if they are that significant, us customers would love to see.

Re: Why is BT Hacking into my WiFi Network All Day and Night? Thought it was hackers

Chareve — Mon, 05 Aug 2024 21:09:06 GMT

Re: Why is BT Hacking into my WiFi Network All Day and Night? Thought it was hackers

Chareve — Mon, 05 Aug 2024 21:10:24 GMT

I have opted out

Re: Why is BT Hacking into my WiFi Network All Day and Night? Thought it was hackers

WSH — Mon, 05 Aug 2024 21:30:31 GMT

Well, I might have missed something but at a glance, I can’t see anything untoward in there. What exactly is it you’re concerned about?

Re: Why is BT Hacking into my WiFi Network All Day and Night? Thought it was hackers

WSH — Mon, 05 Aug 2024 22:22:30 GMT

As a very quick and brief explanation of the mains points:

CWMP is Customer Premises Equipment (or CPE) WAN Management Protocol, (also known as TR069). Basically, BT checking if any adjustments are needed to keep the line stable, any updates are needed, whether a 14-day reboot is due etc. Happens once every 24 hours by default, although I have two SH2’s and one of them seems to like doing it every hour for some reason. It does not provide access to your network and the Smart Hub is BT’s property, so why shouldn’t they manage it?

SIP (or Session Initiation Protocol) is the protocol that manages Digital Voice. Your phone number is now tied to your IP address. IP addresses are not permanent, of course, so every 30 minutes the SIP protocol confirms that the relationship between the IP address and the phone number is still valid and re-registers it. (30 mins is the protocol default. If memory serves BT’s implementation checks every 40 minutes).

Neighbour solicit is an aspect of how IPv6 works. Computers inside the network talk to each other via the MAC address (Media Access Control address). Your computer keeps a record of how the MAC addresses relates to the IP addresses and what the MAC addresses of its neighbours are. Periodically it sends out Neighbour Solicit messages asking its neighbours to confirm if they are still there so it can update its records. ARP (Address Resolution Protocol) is similar but the old and less efficient IPv4 way of doing it. Both are routine internal network housekeeping traffic.

The Port Scanning/Dos Spoofing is actually bad guys trying their hand but the good news is that the fact that it appears in the log means your firewall has seen it and blocked it. The IP addresses in those are fake (spoofed) and will appear to originate from all over the place. Sadly, it’s quite normal today and everyone gets a load of them.

In some respects, part of the problem is that the Smart Hub logs are too detailed and so look a bit scary. Most of it is just routine housekeeping though. All of this is available on Google, (and in a lot more detail than I’ve gone into here), so you can check for yourself.

I'm off to bed. Goodnight.