Router check found hidden remote admin app

Suprik@Supriik_

it’s f*cking insane

the guy who installed my wifi left something on my router. and for 23 days every website i opened went through someone else's server first

the wifi was installed. he spent 40 minutes "setting it up". said it's for faster support. i said thanks and never thought about it again

then i read my own article about hidden cameras on wifi and decided to check my own router with claude

i exported the router config and an hour of traffic, gave both to claude in read-only mode and asked one question: what on this router is not mine?

the first answer made me close the laptop for a minute

→ remote admin was open to the whole internet on port 8443
→ admin password was still the default one printed on the box
→ a "remote support" app i never installed, checking in to an unknown server every 5 minutes
→ my DNS was switched to their servers. every site i opened was looked up through them first
→ a port forward straight to my home storage with all my photos

23 days. 6,624 check-ins. 41,280 DNS lookups logged on a server i don't control

i don't know if anyone actually looked. but they could. my bank, my emails, what i search at 2am. all of it went through a box someone else had the keys to

what i did that night:
> factory reset the router
> updated the firmware from the manufacturer's site, not from the "support" link
> new admin password, remote admin OFF, WPS OFF, UPnP OFF
> DNS back to one i chose myself
> deleted the port forward
> new wifi password and checked every connected device
> called the provider and asked what exactly their guy installed. they're "checking"

check yours tonight. log into your router, look at remote management, DNS and port forwarding. if there's anything you didn't set, it's not yours

the full router check with claude is in the article below. takes 15 minutes