[Chugalug] Brute force attacks on router… Maybe?

Nick Smith nick at nicksmith.us
Thu Feb 28 20:30:54 UTC 2013


It was just a guess, i had a similar experience at a customer site
with a more powerful AP on the same channel, would kill the connection
and disconnect the clients like he was describing.  Getting hacked is
not as boring though.  :-)

On Thu, Feb 28, 2013 at 3:25 PM, Stephen Kraus <ub3ratl4sf00 at gmail.com> wrote:
> Nick: It shouldn't be delayed like that though, it would be noticeable
> instantly.
>
>
> On Thu, Feb 28, 2013 at 3:22 PM, Nick Smith <nick at nicksmith.us> wrote:
>>
>> Have you tried changing the wireless channel the AP is operating on?
>> With that many networks in range there might be some overlap
>> interfering with the signal maybe?
>>
>> Just a guess.
>>
>> On Thu, Feb 28, 2013 at 3:17 PM, Stephen Kraus <ub3ratl4sf00 at gmail.com>
>> wrote:
>> > Time to start watching what is connecting, best thing to do is see if
>> > you
>> > can get the client list of what is connected via MAC addresses and look
>> > for
>> > repeat MAC addresses of devices you don't own.
>> >
>> > What security are you running?
>> >
>> > On Thu, Feb 28, 2013 at 3:12 PM, Phil Sieg <phil.sieg at gmail.com> wrote:
>> >>
>> >> Ok gang I need some help here... Dave Brockman weigh in if you have
>> >> time.
>> >>
>> >> I have a wireless network at the office that will not behave. I always
>> >> run
>> >> my wireless routers as AP only with no DHCP. PfSense is doing all the
>> >> heavy
>> >> lifting.
>> >>
>> >> I have replaced the router at the office with 4 different brands in the
>> >> last 8 months. Currently a Cisco/linksys product. Was fine until
>> >> yesterday
>> >> then started acting up in similar ways to the last 3 units. Some of my
>> >> connected computers just disconnect and will NOT maintain a connection
>> >> unless I reboot the router. Add to that the the admin web-gui is not
>> >> accessible unless I reboot.
>> >>
>> >> Some routers were running factory firmware, some had DDWRT.
>> >>
>> >> I know the amount of information I am giving you is light, just
>> >> wondered
>> >> if anybody either had a good idea of what it might be due to prior's,
>> >> or
>> >> that I am getting brute-forced repeatedly because it is a target rich
>> >> environment (20+ wireless networks) or is it the proliferation of
>> >> wireless
>> >> that is gimping things up?
>> >>
>> >> Hello.... Bueller?    Bueller?
>> >>
>> >> Phil Sieg
>> >> President
>> >> SeniorTech LLC / snapfōn®
>> >> www.snapfon.com
>> >> phil.sieg at seniortechllc.com
>> >>
>> >> Phone: 423.535.9968
>> >> Fax: 423.265.9820
>> >> Mobile: 423.331.0725
>> >>
>> >> "The computer is the most remarkable tool that we've ever come up with.
>> >> It's the equivalent of a bicycle for our minds."
>> >>
>> >> Steve Jobs, 1955-2011
>> >>
>> >>
>> >>
>> >>
>> >>
>> >> _______________________________________________
>> >> Chugalug mailing list
>> >> Chugalug at chugalug.org
>> >> http://chugalug.org/cgi-bin/mailman/listinfo/chugalug
>> >>
>> >
>> >
>> > _______________________________________________
>> > Chugalug mailing list
>> > Chugalug at chugalug.org
>> > http://chugalug.org/cgi-bin/mailman/listinfo/chugalug
>> >
>>
>>
>>
>> --
>> --------------
>> Nick Smith
>> nick at nicksmith dot us
>> _______________________________________________
>> Chugalug mailing list
>> Chugalug at chugalug.org
>> http://chugalug.org/cgi-bin/mailman/listinfo/chugalug
>
>
>
> _______________________________________________
> Chugalug mailing list
> Chugalug at chugalug.org
> http://chugalug.org/cgi-bin/mailman/listinfo/chugalug
>



-- 
--------------
Nick Smith
nick at nicksmith dot us


More information about the Chugalug mailing list