Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Why would someone be doing this?


  • Please log in to reply

#1
FancyFeathers

FancyFeathers

    New Member

  • Member
  • Pip
  • 3 posts
Hi guys, I seem to be having an issue with a neighbor? attempting to hack into my network just constantly and has been for a few weeks that I'm aware of now. I have a Netgear WPN824N with WPA2-PSK [AES] as security, a MAC address access list, and UPnP is turned off, (as of Monday). Anyway, these are my logs. If you guys have an idea as to why someone would be spending this much time attempting to get onto my network I'd love to hear it. There's also a LAN access from remote that I find concerning from Monday the 21st, do you know what that could be? Is there also any way to make it more secure? The following devices are mine: 78:d6:f0:21:93:13, 70:1A:04:5D:71:85, 4C:0F:6E:41:B8:6E

[admin login] from source 192.168.1.4, Thursday, May 24,2012 18:21:37
[WLAN access denied] from MAC: 00:24:2b:85:23:ad, Thursday, May 24,2012 18:14:06
[admin login] from source 192.168.1.4, Thursday, May 24,2012 18:13:02
[WLAN access denied] from MAC: 00:24:2b:85:23:ad, Thursday, May 24,2012 18:05:38
[admin login] from source 192.168.1.4, Thursday, May 24,2012 18:02:53
[WLAN access denied] from MAC: 00:24:2b:85:23:ad, Thursday, May 24,2012 17:57:15
[WLAN access denied] from MAC: 88:9f:fa:44:45:6a, Thursday, May 24,2012 17:55:28
[WLAN access denied] from MAC: 00:24:2b:85:23:ad, Thursday, May 24,2012 17:54:52
[WLAN access denied] from MAC: 88:9f:fa:44:45:6a, Thursday, May 24,2012 17:54:23
[admin login] from source 192.168.1.4, Thursday, May 24,2012 17:53:47
[WLAN access denied] from MAC: 00:24:2b:85:23:ad, Thursday, May 24,2012 17:53:40
[WLAN access denied] from MAC: 88:9f:fa:44:45:6a, Thursday, May 24,2012 17:53:19
[WLAN access denied] from MAC: 00:24:2b:85:23:ad, Thursday, May 24,2012 17:52:27
[WLAN access denied] from MAC: 88:9f:fa:44:45:6a, Thursday, May 24,2012 17:52:13
[WLAN access denied] from MAC: 00:24:2b:85:23:ad, Thursday, May 24,2012 17:51:14
[WLAN access denied] from MAC: 88:9f:fa:44:45:6a, Thursday, May 24,2012 17:50:04
[WLAN access denied] from MAC: 00:24:2b:85:23:ad, Thursday, May 24,2012 17:50:01
[WLAN access denied] from MAC: 88:9f:fa:44:45:6a, Thursday, May 24,2012 17:49:00
[WLAN access denied] from MAC: 00:24:2b:85:23:ad, Thursday, May 24,2012 17:48:48
[WLAN access denied] from MAC: 88:9f:fa:44:45:6a, Thursday, May 24,2012 17:47:54
[WLAN access denied] from MAC: 00:24:2b:85:23:ad, Thursday, May 24,2012 17:47:35
[WLAN access denied] from MAC: 88:9f:fa:44:45:6a, Thursday, May 24,2012 17:46:51
[WLAN access denied] from MAC: 00:24:2b:85:23:ad, Thursday, May 24,2012 17:46:22
[WLAN access denied] from MAC: 88:9f:fa:44:45:6a, Thursday, May 24,2012 17:45:45
[WLAN access denied] from MAC: 00:24:2b:85:23:ad, Thursday, May 24,2012 17:45:09
[WLAN access denied] from MAC: 88:9f:fa:44:45:6a, Thursday, May 24,2012 17:44:39
[WLAN access denied] from MAC: 00:24:2b:85:23:ad, Thursday, May 24,2012 17:43:56
[WLAN access denied] from MAC: 88:9f:fa:44:45:6a, Thursday, May 24,2012 17:41:25
[WLAN access denied] from MAC: 00:24:2b:85:23:ad, Thursday, May 24,2012 17:40:24
[WLAN access denied] from MAC: 88:9f:fa:44:45:6a, Thursday, May 24,2012 17:37:06
[admin login] from source 192.168.1.4, Thursday, May 24,2012 17:35:52
[WLAN access denied] from MAC: 00:24:2b:85:23:ad, Thursday, May 24,2012 17:32:14
[WLAN access denied] from MAC: 88:9f:fa:44:45:6a, Thursday, May 24,2012 17:31:52
[DHCP IP: 192.168.1.2] to MAC address 78:d6:f0:21:93:13, Thursday, May 24,2012 17:31:04
[WLAN access allowed] from MAC: 78:d6:f0:21:93:13, Thursday, May 24,2012 17:31:04
[WLAN access denied] from MAC: 00:24:2b:85:23:ad, Thursday, May 24,2012 17:31:01
[WLAN access denied] from MAC: 88:9f:fa:44:45:6a, Thursday, May 24,2012 17:26:27
[WLAN access denied] from MAC: 00:24:2b:85:23:ad, Thursday, May 24,2012 17:26:19
[WLAN access denied] from MAC: 88:9f:fa:44:45:6a, Thursday, May 24,2012 17:22:08
[Internet connected] IP address: xx.xxx.xx.xxx, Thursday, May 24,2012 17:21:22
[WLAN access denied] from MAC: 88:9f:fa:44:45:6a, Thursday, May 24,2012 17:16:44
[WLAN access denied] from MAC: 00:24:2b:85:23:ad, Thursday, May 24,2012 17:15:47
[WLAN access denied] from MAC: 88:9f:fa:44:45:6a, Thursday, May 24,2012 17:07:07
[WLAN access denied] from MAC: 90:21:55:ee:eb:0a, Thursday, May 24,2012 14:33:53
[Time synchronized with NTP server] Thursday, May 24,2012 14:23:08
[DoS Attack: RST Scan] from source: 69.115.68.90, port 55669, Thursday, May 24,2012 14:05:19
[DHCP IP: 192.168.1.2] to MAC address 78:d6:f0:21:93:13, Thursday, May 24,2012 12:50:09
[WLAN access allowed] from MAC: 78:d6:f0:21:93:13, Thursday, May 24,2012 12:50:07
[DHCP IP: 192.168.1.2] to MAC address 78:d6:f0:21:93:13, Thursday, May 24,2012 11:38:29
[WLAN access allowed] from MAC: 78:d6:f0:21:93:13, Thursday, May 24,2012 11:38:28
[WLAN access rejected: incorrect security] from MAC address 78:d6:f0:21:93:13, Thursday, May 24,2012 11:38:23
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Thursday, May 24,2012 11:11:06
[WLAN access allowed] from MAC: 70:1a:04:5d:71:85, Thursday, May 24,2012 11:11:06
[DHCP IP: 192.168.1.2] to MAC address 78:d6:f0:21:93:13, Thursday, May 24,2012 11:00:58
[WLAN access allowed] from MAC: 78:d6:f0:21:93:13, Thursday, May 24,2012 11:00:57
[DHCP IP: 192.168.1.2] to MAC address 78:d6:f0:21:93:13, Thursday, May 24,2012 11:00:43
[WLAN access allowed] from MAC: 78:d6:f0:21:93:13, Thursday, May 24,2012 10:44:46
[WLAN access rejected: incorrect security] from MAC address 78:d6:f0:21:93:13, Thursday, May 24,2012 08:38:23
[Internet connected] IP address: xx.xxx.xx.xxx, Thursday, May 24,2012 08:32:03
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Thursday, May 24,2012 08:01:56
[WLAN access allowed] from MAC: 70:1a:04:5d:71:85, Thursday, May 24,2012 08:01:56
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Thursday, May 24,2012 08:01:38
[WLAN access allowed] from MAC: 70:1a:04:5d:71:85, Thursday, May 24,2012 08:01:38
[WLAN access denied] from MAC: 04:c0:6f:54:e2:bf, Thursday, May 24,2012 07:52:25
[WLAN access denied] from MAC: 00:24:2b:85:23:ad, Thursday, May 24,2012 07:16:22
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Thursday, May 24,2012 07:05:26
[WLAN access allowed] from MAC: 70:1a:04:5d:71:85, Thursday, May 24,2012 07:05:26
[Internet connected] IP address: xx.xxx.xx.xxx, Wednesday, May 23,2012 23:37:00
[DoS Attack: ACK Scan] from source: 199.59.166.47, port 80, Wednesday, May 23,2012 23:14:12
[admin login] from source 192.168.1.4, Wednesday, May 23,2012 23:11:16
[DoS Attack: ACK Scan] from source: 199.59.166.47, port 80, Wednesday, May 23,2012 22:17:10
[WLAN access denied] from MAC: 88:9f:fa:44:45:6a, Wednesday, May 23,2012 21:24:21
[DHCP IP: 192.168.1.3] to MAC address 4c:0f:6e:41:b8:6e, Wednesday, May 23,2012 21:23:55
[WLAN access allowed] from MAC: 4c:0f:6e:41:b8:6e, Wednesday, May 23,2012 21:23:55
[WLAN access denied] from MAC: 88:9f:fa:44:45:6a, Wednesday, May 23,2012 21:10:11
[admin login] from source 192.168.1.4, Wednesday, May 23,2012 19:53:37
[WLAN access denied] from MAC: 00:24:2b:85:23:ad, Wednesday, May 23,2012 19:24:57
[admin login] from source 192.168.1.4, Wednesday, May 23,2012 19:24:02
[WLAN access denied] from MAC: 00:24:2b:85:23:ad, Wednesday, May 23,2012 18:56:11
[DHCP IP: 192.168.1.3] to MAC address 4c:0f:6e:41:b8:6e, Wednesday, May 23,2012 18:55:57
[WLAN access allowed] from MAC: 4c:0f:6e:41:b8:6e, Wednesday, May 23,2012 18:55:56
[WLAN access denied] from MAC: 00:24:2b:85:23:ad, Wednesday, May 23,2012 18:32:33
[DoS Attack: ACK Scan] from source: 71.210.139.182, port 52681, Wednesday, May 23,2012 17:28:30
[DHCP IP: 192.168.1.2] to MAC address 78:d6:f0:21:93:13, Wednesday, May 23,2012 16:12:44
[WLAN access allowed] from MAC: 78:d6:f0:21:93:13, Wednesday, May 23,2012 16:12:44
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Wednesday, May 23,2012 15:45:20
[WLAN access allowed] from MAC: 70:1a:04:5d:71:85, Wednesday, May 23,2012 15:45:20
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Wednesday, May 23,2012 15:34:42
[WLAN access allowed] from MAC: 70:1a:04:5d:71:85, Wednesday, May 23,2012 15:34:42
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Wednesday, May 23,2012 15:09:33
[WLAN access allowed] from MAC: 70:1a:04:5d:71:85, Wednesday, May 23,2012 15:09:33
[Internet connected] IP address: xx.xxx.xx.xxx, Wednesday, May 23,2012 14:48:30
[Time synchronized with NTP server] Wednesday, May 23,2012 13:23:08
[DHCP IP: 192.168.1.2] to MAC address 78:d6:f0:21:93:13, Wednesday, May 23,2012 14:03:24
[WLAN access allowed] from MAC: 78:d6:f0:21:93:13, Wednesday, May 23,2012 14:03:22
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Wednesday, May 23,2012 13:07:27
[WLAN access allowed] from MAC: 70:1a:04:5d:71:85, Wednesday, May 23,2012 13:07:27
[admin login] from source 192.168.1.4, Wednesday, May 23,2012 12:52:36
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Wednesday, May 23,2012 12:19:16
[WLAN access allowed] from MAC: 70:1a:04:5d:71:85, Wednesday, May 23,2012 12:19:16
[WLAN access denied] from MAC: 00:24:2b:85:23:ad, Wednesday, May 23,2012 12:18:49
[DHCP IP: 192.168.1.2] to MAC address 78:d6:f0:21:93:13, Wednesday, May 23,2012 12:16:40
[WLAN access allowed] from MAC: 78:d6:f0:21:93:13, Wednesday, May 23,2012 12:16:40
[WLAN access denied] from MAC: 00:24:2b:85:23:ad, Wednesday, May 23,2012 10:45:38
[DoS Attack: ACK Scan] from source: 199.59.166.47, port 80, Wednesday, May 23,2012 10:10:04
[admin login] from source 192.168.1.4, Wednesday, May 23,2012 10:04:44
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Wednesday, May 23,2012 09:58:53
[WLAN access allowed] from MAC: 70:1a:04:5d:71:85, Wednesday, May 23,2012 09:58:53
[DHCP IP: 192.168.1.2] to MAC address 78:d6:f0:21:93:13, Wednesday, May 23,2012 09:58:39
[WLAN access allowed] from MAC: 78:d6:f0:21:93:13, Wednesday, May 23,2012 09:58:39
[DoS Attack: ACK Scan] from source: 199.59.166.47, port 80, Wednesday, May 23,2012 09:51:36
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Wednesday, May 23,2012 09:47:26
[WLAN access allowed] from MAC: 70:1a:04:5d:71:85, Wednesday, May 23,2012 09:47:26
[DHCP IP: 192.168.1.2] to MAC address 78:d6:f0:21:93:13, Wednesday, May 23,2012 09:47:25
[WLAN access allowed] from MAC: 78:d6:f0:21:93:13, Wednesday, May 23,2012 09:47:25
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Wednesday, May 23,2012 09:45:09
[WLAN access allowed] from MAC: 70:1a:04:5d:71:85, Wednesday, May 23,2012 09:45:08
[DHCP IP: 192.168.1.2] to MAC address 78:d6:f0:21:93:13, Wednesday, May 23,2012 09:44:38
[WLAN access allowed] from MAC: 78:d6:f0:21:93:13, Wednesday, May 23,2012 09:44:38
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Wednesday, May 23,2012 09:43:53
[DHCP IP: 192.168.1.2] to MAC address 78:d6:f0:21:93:13, Wednesday, May 23,2012 09:43:46
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Wednesday, May 23,2012 09:42:36
[DHCP IP: 192.168.1.2] to MAC address 78:d6:f0:21:93:13, Wednesday, May 23,2012 09:42:27
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Wednesday, May 23,2012 09:41:05
[DHCP IP: 192.168.1.2] to MAC address 78:d6:f0:21:93:13, Wednesday, May 23,2012 09:39:49
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Wednesday, May 23,2012 09:39:36
[admin login] from source 192.168.1.4, Wednesday, May 23,2012 09:36:29
[WLAN access rejected: incorrect security] from MAC address 8c:58:77:ee:63:37, Wednesday, May 23,2012 09:33:59
[DHCP IP: 192.168.1.2] to MAC address 78:d6:f0:21:93:13, Wednesday, May 23,2012 09:12:26
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Wednesday, May 23,2012 06:52:04
[Internet connected] IP address: xx.xxx.xx.xxx, Wednesday, May 23,2012 05:52:31
[DoS Attack: ACK Scan] from source: 199.59.166.47, port 80, Wednesday, May 23,2012 01:20:16
[DHCP IP: 192.168.1.2] to MAC address 78:d6:f0:21:93:13, Wednesday, May 23,2012 00:33:08
[WLAN access rejected: incorrect security] from MAC address 78:d6:f0:21:93:13, Wednesday, May 23,2012 00:33:05
[DHCP IP: 192.168.1.2] to MAC address 78:d6:f0:21:93:13, Wednesday, May 23,2012 00:22:30
[WLAN access rejected: incorrect security] from MAC address 78:d6:f0:21:93:13, Wednesday, May 23,2012 00:22:25
[DHCP IP: 192.168.1.3] to MAC address 4c:0f:6e:41:b8:6e, Tuesday, May 22,2012 21:35:50
[Internet connected] IP address: xx.xxx.xx.xxx, Tuesday, May 22,2012 21:05:03
[WLAN access rejected: incorrect security] from MAC address 00:24:2b:85:23:ad, Tuesday, May 22,2012 20:22:03
[DHCP IP: 192.168.1.2] to MAC address 78:d6:f0:21:93:13, Tuesday, May 22,2012 20:07:18
[WLAN access rejected: incorrect security] from MAC address 78:d6:f0:21:93:13, Tuesday, May 22,2012 20:07:01
[DHCP IP: 192.168.1.2] to MAC address 78:d6:f0:21:93:13, Tuesday, May 22,2012 19:56:45
[WLAN access rejected: incorrect security] from MAC address 78:d6:f0:21:93:13, Tuesday, May 22,2012 19:33:12
[DHCP IP: 192.168.1.2] to MAC address 78:d6:f0:21:93:13, Tuesday, May 22,2012 19:03:15
[WLAN access rejected: incorrect security] from MAC address 78:d6:f0:21:93:13, Tuesday, May 22,2012 19:03:12
[DHCP IP: 192.168.1.2] to MAC address 78:d6:f0:21:93:13, Tuesday, May 22,2012 18:21:25
[DoS Attack: ACK Scan] from source: 199.59.166.47, port 80, Tuesday, May 22,2012 17:26:47
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Tuesday, May 22,2012 15:24:37
[Time synchronized with NTP server] Tuesday, May 22,2012 13:23:06
[Initialized, firmware version: V1.0.0.22] Tuesday, May 22,2012 13:23:06
[Time synchronized with NTP server] Tuesday, May 22,2012 13:22:49
[Initialized, firmware version: V1.0.0.22] Tuesday, May 22,2012 13:22:49
[DHCP IP: 192.168.1.2] to MAC address 78:d6:f0:21:93:13, Tuesday, May 22,2012 13:21:11
[admin login] from source 192.168.1.4, Tuesday, May 22,2012 13:12:18
[Internet connected] IP address: xx.xxx.xx.xxx, Tuesday, May 22,2012 11:07:53
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Tuesday, May 22,2012 10:34:00
[DoS Attack: ACK Scan] from source: 71.210.139.182, port 62615, Tuesday, May 22,2012 10:08:25
[DHCP IP: 192.168.1.2] to MAC address 78:d6:f0:21:93:13, Tuesday, May 22,2012 09:53:09
[WLAN access rejected: incorrect security] from MAC address 8c:58:77:ee:63:37, Tuesday, May 22,2012 08:38:57
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Tuesday, May 22,2012 08:20:41
[admin login] from source 192.168.1.4, Tuesday, May 22,2012 08:19:29
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Tuesday, May 22,2012 08:15:56
[admin login] from source 192.168.1.4, Tuesday, May 22,2012 07:45:12
[admin login failure] from source 192.168.1.4, Tuesday, May 22,2012 07:45:06
[DHCP IP: 192.168.1.2] to MAC address 78:d6:f0:21:93:13, Tuesday, May 22,2012 07:22:25
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Tuesday, May 22,2012 07:22:04
[Time synchronized with NTP server] Tuesday, May 22,2012 07:16:13
[admin login] from source 192.168.1.4, Tuesday, May 22,2012 07:13:31
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Tuesday, May 22,2012 06:48:18
[Internet connected] IP address: xx.xxx.xx.xxx, Tuesday, May 22,2012 02:21:48
[UPnP set event: del_nat_rule] from source 192.168.1.4 Monday, May 21,2012 23:39:59
[UPnP set event: add_nat_rule] from source 192.168.1.4 Monday, May 21,2012 23:39:59
[LAN access from remote] from 68.187.200.192:56226 to 192.168.1.4:60609, Monday, May 21,2012 23:23:22
[UPnP set event: add_nat_rule] from source 192.168.1.4 Monday, May 21,2012 23:23:21
[UPnP set event: del_nat_rule] from source 192.168.1.4 Monday, May 21,2012 23:23:21
[UPnP set event: add_nat_rule] from source 192.168.1.4 Monday, May 21,2012 23:23:21
[UPnP set event: del_nat_rule] from source 192.168.1.4 Monday, May 21,2012 23:08:04
[LAN access from remote] from 68.187.200.192:52877 to 192.168.1.4:60091, Monday, May 21,2012 22:28:16
[UPnP set event: add_nat_rule] from source 192.168.1.4 Monday, May 21,2012 22:28:16
[UPnP set event: del_nat_rule] from source 192.168.1.4 Monday, May 21,2012 22:28:16
[UPnP set event: add_nat_rule] from source 192.168.1.4 Monday, May 21,2012 22:28:15
[UPnP set event: del_nat_rule] from source 192.168.1.4 Monday, May 21,2012 22:15:50
[UPnP set event: add_nat_rule] from source 192.168.1.4 Monday, May 21,2012 22:15:50
[LAN access from remote] from 68.187.200.192:52790 to 192.168.1.4:59809, Monday, May 21,2012 22:09:54
[UPnP set event: add_nat_rule] from source 192.168.1.4 Monday, May 21,2012 22:09:54
[UPnP set event: del_nat_rule] from source 192.168.1.4 Monday, May 21,2012 22:09:54
[UPnP set event: add_nat_rule] from source 192.168.1.4 Monday, May 21,2012 22:09:54
[UPnP set event: del_nat_rule] from source 192.168.1.4 Monday, May 21,2012 22:09:04
[UPnP set event: add_nat_rule] from source 192.168.1.4 Monday, May 21,2012 22:09:03
[LAN access from remote] from 68.187.200.192:52681 to 192.168.1.4:59550, Monday, May 21,2012 21:55:38
[UPnP set event: add_nat_rule] from source 192.168.1.4 Monday, May 21,2012 21:55:38
[UPnP set event: del_nat_rule] from source 192.168.1.4 Monday, May 21,2012 21:55:38
[UPnP set event: add_nat_rule] from source 192.168.1.4 Monday, May 21,2012 21:55:38
[UPnP set event: del_nat_rule] from source 192.168.1.4 Monday, May 21,2012 21:55:26
[UPnP set event: add_nat_rule] from source 192.168.1.4 Monday, May 21,2012 21:55:26
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Monday, May 21,2012 18:24:28
[DHCP IP: 192.168.1.3] to MAC address 4c:0f:6e:41:b8:6e, Monday, May 21,2012 18:12:18
[WLAN access rejected: incorrect security] from MAC address 00:24:2b:85:23:ad, Monday, May 21,2012 18:04:07
[Internet connected] IP address: xx.xxx.xx.xxx, Monday, May 21,2012 17:23:02
[DHCP IP: 192.168.1.2] to MAC address 78:d6:f0:21:93:13, Monday, May 21,2012 16:59:55
[DoS Attack: ACK Scan] from source: 79.125.123.251, port 80, Monday, May 21,2012 16:36:31
[UPnP set event: del_nat_rule] from source 192.168.1.4 Monday, May 21,2012 16:35:56
[UPnP set event: add_nat_rule] from source 192.168.1.4 Monday, May 21,2012 16:35:56
[DoS Attack: ACK Scan] from source: 79.125.123.251, port 80, Monday, May 21,2012 16:35:40
[WLAN access rejected: incorrect security] from MAC address 88:9f:fa:44:45:6a, Monday, May 21,2012 16:32:00
[UPnP set event: del_nat_rule] from source 192.168.1.4 Monday, May 21,2012 16:29:50
[UPnP set event: add_nat_rule] from source 192.168.1.4 Monday, May 21,2012 16:29:50
[WLAN access rejected: incorrect security] from MAC address 04:c0:6f:54:e2:bf, Monday, May 21,2012 15:43:51
[WLAN access rejected: incorrect security] from MAC address 90:21:55:ee:eb:0a, Monday, May 21,2012 13:30:34
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Monday, May 21,2012 12:16:04
[DHCP IP: 192.168.1.2] to MAC address 78:d6:f0:21:93:13, Monday, May 21,2012 10:36:20
[Internet connected] IP address: xx.xxx.xx.xxx, Monday, May 21,2012 08:38:47
[UPnP set event: del_nat_rule] from source 192.168.1.4 Monday, May 21,2012 08:18:58
[UPnP set event: add_nat_rule] from source 192.168.1.4 Monday, May 21,2012 08:18:58
[Time synchronized with NTP server] Monday, May 21,2012 07:16:12
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Monday, May 21,2012 06:56:47
[UPnP set event: add_nat_rule] from source 192.168.1.4 Monday, May 21,2012 06:42:30
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Monday, May 21,2012 06:41:50
[Internet connected] IP address: xx.xxx.xx.xxx, Sunday, May 20,2012 23:37:56
[DHCP IP: 192.168.1.2] to MAC address 78:d6:f0:21:93:13, Sunday, May 20,2012 22:20:13
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Sunday, May 20,2012 16:53:32
[UPnP set event: del_nat_rule] from source 192.168.1.4 Sunday, May 20,2012 16:50:00
[WLAN access rejected: incorrect security] from MAC address 00:24:2b:85:23:ad, Sunday, May 20,2012 16:16:32
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Sunday, May 20,2012 15:37:09
[WLAN access rejected: incorrect security] from MAC address 70:1a:04:5d:71:85, Sunday, May 20,2012 15:37:05
[DHCP IP: 192.168.1.3] to MAC address 4c:0f:6e:41:b8:6e, Sunday, May 20,2012 15:31:38
[UPnP set event: del_nat_rule] from source 192.168.1.4 Sunday, May 20,2012 15:08:59
[UPnP set event: add_nat_rule] from source 192.168.1.4 Sunday, May 20,2012 15:08:50
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Sunday, May 20,2012 15:08:45
[Internet connected] IP address: xx.xxx.xx.xxx, Sunday, May 20,2012 14:56:04
[DHCP IP: 192.168.1.3] to MAC address 4c:0f:6e:41:b8:6e, Sunday, May 20,2012 10:39:39
[UPnP set event: del_nat_rule] from source 192.168.1.4 Sunday, May 20,2012 10:03:29
[DHCP IP: 192.168.1.3] to MAC address 4c:0f:6e:41:b8:6e, Sunday, May 20,2012 09:09:52
[Time synchronized with NTP server] Sunday, May 20,2012 07:16:12
[LAN access from remote] from 174.95.155.6:65044 to 192.168.1.4:58260, Sunday, May 20,2012 07:14:28
[DHCP IP: 192.168.1.3] to MAC address 4c:0f:6e:41:b8:6e, Sunday, May 20,2012 07:02:31
[UPnP set event: del_nat_rule] from source 192.168.1.4 Sunday, May 20,2012 06:26:43
[UPnP set event: add_nat_rule] from source 192.168.1.4 Sunday, May 20,2012 06:25:43
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Sunday, May 20,2012 06:24:57
[DHCP IP: 192.168.1.3] to MAC address 4c:0f:6e:41:b8:6e, Sunday, May 20,2012 06:16:42
[Internet connected] IP address: xx.xxx.xx.xxx, Sunday, May 20,2012 05:52:30
[DHCP IP: 192.168.1.2] to MAC address 78:d6:f0:21:93:13, Sunday, May 20,2012 02:08:08
[DHCP IP: 192.168.1.3] to MAC address 4c:0f:6e:41:b8:6e, Saturday, May 19,2012 21:52:38
[WLAN access rejected: incorrect security] from MAC address 8c:58:77:ee:63:37, Saturday, May 19,2012 21:48:30
[DoS Attack: ACK Scan] from source: 199.59.166.47, port 80, Saturday, May 19,2012 21:16:09
[Internet connected] IP address: xx.xxx.xx.xxx, Saturday, May 19,2012 21:13:44
[DHCP IP: 192.168.1.3] to MAC address 4c:0f:6e:41:b8:6e, Saturday, May 19,2012 20:42:54
[DoS Attack: ACK Scan] from source: 199.59.166.47, port 80, Saturday, May 19,2012 20:35:32
[DoS Attack: ACK Scan] from source: 78.140.130.171, port 80, Saturday, May 19,2012 19:50:18
[DHCP IP: 192.168.1.3] to MAC address 4c:0f:6e:41:b8:6e, Saturday, May 19,2012 18:45:12
[DHCP IP: 192.168.1.2] to MAC address 78:d6:f0:21:93:13, Saturday, May 19,2012 17:56:35
[UPnP set event: del_nat_rule] from source 192.168.1.4 Saturday, May 19,2012 17:49:51
[UPnP set event: add_nat_rule] from source 192.168.1.4 Saturday, May 19,2012 17:49:51
[WLAN access rejected: incorrect security] from MAC address 8c:58:77:ee:63:37, Saturday, May 19,2012 17:24:38
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Saturday, May 19,2012 16:57:18
[DHCP IP: 192.168.1.3] to MAC address 4c:0f:6e:41:b8:6e, Saturday, May 19,2012 16:53:27
[Internet connected] IP address: xx.xxx.xx.xxx, Saturday, May 19,2012 12:06:37
[UPnP set event: del_nat_rule] from source 192.168.1.4 Saturday, May 19,2012 11:10:41
[DHCP IP: 192.168.1.3] to MAC address 4c:0f:6e:41:b8:6e, Saturday, May 19,2012 10:34:53
[UPnP set event: del_nat_rule] from source 192.168.1.4 Saturday, May 19,2012 10:00:40
[UPnP set event: add_nat_rule] from source 192.168.1.4 Saturday, May 19,2012 09:57:23
[DHCP IP: 192.168.1.4] to MAC address 70:1a:04:5d:71:85, Saturday, May 19,2012 09:54:16

Edited by Artellos, 25 May 2012 - 05:14 PM.
Removed the public IP address.

  • 0

Advertisements


#2
Artellos

Artellos

    Tech Secretary

  • Global Moderator
  • 3,888 posts
First of all, my first "guess" would be some neighbor kid that read something about "cracking" wireless networks and is now trying it on yours. Other than that, no idea who would want to spend a lot of time cracking a 'commoners' network. Not a lot for them to gain, in my eyes.

That being said, There is only so much you can do to make it stop. And you're never 100% safe if they are really out for you. :rolleyes:

Something you could do is turn off broadcasting your SSID. However, that will only stop the "kiddies" as it only hides it from the network lists. If you "sniff" the "air" you can still find the SSID to the network and perform attacks that way. So if you are dealing with someone serious they will still know how to attack the wireless network. Wiki page -> http://en.wikipedia....(802.11_network)#Security_disadvantages_of_SSID_hiding

Another step you can take is changing the passphrase of the WPA2 encryption every 1-2 weeks. That way you'll make it harder for them.

The Wireless Security Wiki Page also lists a few more ways to add some security.

However, if you're still experiencing attacks after taking more precautions and you are worried about the safety of the network, all I can say is that turning it off completely is the only way to make 100% certain that they will not get in to your network through the air.

I hope this helps a little. :blush:

Regards,
Olrik
  • 0

#3
Ztruker

Ztruker

    Member 5k

  • Technician
  • 7,065 posts
Also make sure you have a good pass phrase, not something simple and easy top remember. I use a mix of 10 characters, upper and lower case plus 4 digits.
  • 0

#4
FancyFeathers

FancyFeathers

    New Member

  • Topic Starter
  • Member
  • Pip
  • 3 posts
Thank you! I definitely plan on changing the password over the weekend. I changed the SSID and shut the wifi off overnight, and the constant attempts at logging in stopped. I did try turning off the broadcasting for the SSID but I run my phone off of wifi because we have no service here, and it couldn't find the network again. I only started looking at this because we had a really drastic slowdown on our internet speed all of a sudden and then I found the MAC address for a PS3 attached to our router with no assigned IP. What I just can't grasp is why my router, there are 18 other networks within range of mine most of which are also N, and 2 are open. Given the time of day that all of this is going on it actually appears to be an adult doing this since a fair amount of it has been during school hours, and I'm pretty sure I know which neighbor it is. I could be wrong, but I have the who figured out. It just seems like a giant waste of time on someone else's part unless they've been busy downloading some pretty illegal things off of my connection or something.
  • 0

#5
Artellos

Artellos

    Tech Secretary

  • Global Moderator
  • 3,888 posts
The 'why' is always hard to figure out ;) Especially when you're dealing with these kinds of people :ph34r:

And if you're quite sure who is doing it, why not pay them a visit and ask them what they are up to? :happy: Technically what they are doing is illegal, as they are trying to breach a network without authorization. :blink:

Regards,
Olrik
  • 0

#6
FancyFeathers

FancyFeathers

    New Member

  • Topic Starter
  • Member
  • Pip
  • 3 posts
I would if it wasn't one of my weirder neighbors! So far it looks like they've moved on to another network since I changed the SSID and password, there hasn't been even 1 attempt at logging in!
  • 0

#7
Artellos

Artellos

    Tech Secretary

  • Global Moderator
  • 3,888 posts
hehe, I get what you mean. Well, glad to hear everything is working out for you :) Thanks for posting back to us! :thumbsup:

Regards,
Olrik
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP