Router UNDER ATTACK!

[Parabola]

Attached is my log file from my router. Tell me what you think I should do.

[Jordan]

Can you block that Mac address?

00-1B-5B-6E-CF-59

[Orjan]

I don't think that's an proper attack, I think that is more likely a few neighbor's PCs just trying to connect to your WiFi. If it was to be an real attack, you would see a lot more frequent tries and probably from a much wider range of mac addresses (mac spoofing(?))

[Parabola]

Well, I tried to block that MAC address from associating at all with my router, and..well.... this is what my log looks like now. Orjan, is this what you meant? lol

Tuesday, December 01, 2009 9:05:34 PM Admin from 192.168.1.148 login successful
Tuesday, December 01, 2009 9:05:34 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:34 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:34 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:34 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:35 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:35 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:35 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:35 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:35 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:35 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:35 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:35 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:35 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:35 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:36 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:36 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:36 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:36 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:36 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:36 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:36 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:36 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:36 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:37 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:37 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:37 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:37 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:37 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:37 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:37 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:37 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:37 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:38 PM Unallowed access from 00-1B-5B-6E-CF-59
Tuesday, December 01, 2009 9:05:38 PM Unallowed access from 00-1B-5B-6E-CF-59

[Orjan]

Now it looks like an angry neighbor trying to kill your router as he can't connect to yor lan... ;-)

[Jordan]

I don't know if you can do more than blocking it like you have.

[jthom263]

Do U Have A firewall, If So Which one?? It Could Be Possible To Block All MAC's Access To your Router And Then Make An Exeptions List With Just The MAC Addresses Of The Computers On your WLAN. Maybe Another Option Might Be To Just Set Up A Cable LAN So Basically None Of Your Neighbours Can Detect You. If That Is Not An Option You Could Do Is Buy One Of Those Special Arials For Wireless Routers That Only Have Limited Range And Only One Way Range So You Could Point It Away From Where The Mac Address Is... The Way You Could Detect The Direction Of Their Computer Is Use Easy Wifi Radar .... I'm Not Sure Whether That Will Work With This Situation Though....

Hope That Helps

[gokuajmes]

my best bet in securing your router from illegal Tapping is
1st Change the Default password for the Router
2nd Enable Mac filtering & then Block the Mac address of the PC that is trying a spoof!!
3rd Disable SSID broadcasting , [by doing this , the pc's wifi cannot see your network ] for more on this read the article below

http://www.tekstenuitleg.net/en/articles/networking/wireless-security-guide/ssid-broadcast.html