Jump to content



Photo

Has my WiFi been hacked?


  • Please log in to reply
24 replies to this topic

#1 illegaloperation

illegaloperation

    Neowinian Senior

  • Joined: 24-October 09

Posted 20 May 2013 - 02:23

My internet connection (wired connection) constantly drops and now it keeps showing this screen. I do NOT have a any amped wireless high power range extender smart repeater.

Did someone hacked my WiFi?

Posted Image


#2 Aheer.R.S.

Aheer.R.S.

    I cannot Teach Him, the Boy has no Patience!

  • Tech Issues Solved: 9
  • Joined: 15-October 10

Posted 20 May 2013 - 02:27

What router are you using? Is it an amped?
Do you use strkng gibberish passwords?
Are there any wireless devices connecting to it that you don't recognise as one of yours?


#3 StarkWiz

StarkWiz

    Neowinian

  • Joined: 28-November 06
  • Location: Mumbai, India
  • OS: Windows 8 Pro 64-bit

Posted 20 May 2013 - 02:33

It could be that there is another wireless network with the same name.
Access your router web page and check the wireless network name/ssid (try changing this) , security (Should be WPA/WPA2 for better security. WEP can be cracked), change passphrase.
Use network cable to connect to your router if its not accessible.

#4 OP illegaloperation

illegaloperation

    Neowinian Senior

  • Joined: 24-October 09

Posted 20 May 2013 - 02:35

What router are you using? Is it an amped?
Do you use strkng gibberish passwords?
Are there any wireless devices connecting to it that you don't recognise as one of yours?


I have the Actiontec MI424WR from Verizon and that's it.

The password is something random that came with the modem.

#5 Klownicle

Klownicle

    I get a custom title? Sweett.

  • Joined: 22-June 02

Posted 20 May 2013 - 02:38

In the address bar, I do not see a internal IP which says this is a webpage. DO you see this when you open up chrome first?

#6 OP illegaloperation

illegaloperation

    Neowinian Senior

  • Joined: 24-October 09

Posted 20 May 2013 - 02:39

In the address bar, I do not see a internal IP which says this is a webpage. DO you see this when you open up chrome first?


If I type in anything (google.com, bing.com, wikipedia.org, etc.) this page randomly shows up. This happens on all the browsers.

#7 +Brando212

Brando212

    Neowinian Senior

  • Tech Issues Solved: 13
  • Joined: 15-April 10
  • Location: Omaha, NE
  • OS: Windows 8.1
  • Phone: Sony Xperia ZL, Nokia Lumia 925

Posted 20 May 2013 - 02:44

If I type in anything (google.com, bing.com, wikipedia.org, etc.) this page randomly shows up. This happens on all the browsers.

that sounds more like it might be a virus to me then

#8 OP illegaloperation

illegaloperation

    Neowinian Senior

  • Joined: 24-October 09

Posted 20 May 2013 - 02:47

It could be that there is another wireless network with the same name.
Access your router web page and check the wireless network name/ssid (try changing this) , security (Should be WPA/WPA2 for better security. WEP can be cracked), change passphrase.
Use network cable to connect to your router if its not accessible.


I just changed it to WPA2.

#9 The_Decryptor

The_Decryptor

    STEAL THE DECLARATION OF INDEPENDENCE

  • Tech Issues Solved: 4
  • Joined: 28-September 02
  • Location: Sol System
  • OS: iSymbian 9.2 SP24.8 Mars Bar

Posted 20 May 2013 - 02:49

Are you sure you haven't just connected to somebody elses network? I seriously doubt a hacker replaced your wireless router while you weren't looking.

#10 +Karl L.

Karl L.

    xorangekiller

  • Tech Issues Solved: 15
  • Joined: 24-January 09
  • Location: Virginia, USA
  • OS: Debian Testing

Posted 20 May 2013 - 02:50

If your router is the generic one Verizon issued you, it's likely that you are vulnerable to WPS attacks - even if you were using WPA2 PSK-AES encryption. However even if someone has unauthorized access to your network and chose to connect via another access point (in client bridge or repeater bridge mode), the fact that you are seeing that page means he misconfigured something; so his technical sophistication is likely not all that good. Assuming there is nothing wrong with the DNS resolution on your computer - which there does not seem to be any indication of - running a traceroute and/or checking your router's connection logs for unknown devices should prove whether or not you have an intruder.

Edit:

I just changed it to WPA2.


Do you still have the same problem?

Edit 2:

It is also possible that someone is running another DHCP server on your network, and you are picking up alternate DNS settings from that. Once again, I have no idea why someone would do that (especially by redirecting to such a blatant router configuration page) besides misconfiguration.

#11 OP illegaloperation

illegaloperation

    Neowinian Senior

  • Joined: 24-October 09

Posted 20 May 2013 - 02:51

Are you sure you haven't just connected to somebody elses network? I seriously doubt a hacker replaced your wireless router while you weren't looking.


Yes. My computer is using a wired connection to the modem.

#12 The_Decryptor

The_Decryptor

    STEAL THE DECLARATION OF INDEPENDENCE

  • Tech Issues Solved: 4
  • Joined: 28-September 02
  • Location: Sol System
  • OS: iSymbian 9.2 SP24.8 Mars Bar

Posted 20 May 2013 - 02:55

Yes. My computer is using a wired connection to the modem.


Do you have a wifi card in your computer then? Or is your router setup (for whatever reason) to connect to an upstream router over wifi?

#13 OP illegaloperation

illegaloperation

    Neowinian Senior

  • Joined: 24-October 09

Posted 20 May 2013 - 03:02

Apparently the range extender is this thing: http://www.ampedwire...ts/sr10000.html

Do you still have the same problem?


Not so far, but it has only been 20 minutes.

Do you have a wifi card in your computer then? Or is your router setup (for whatever reason) to connect to an upstream router over wifi?

Not on this computer. It's wired only.

It is also possible that someone is running another DHCP server on your network, and you are picking up alternate DNS settings from that. Once again, I have no idea why someone would do that (especially by redirecting to such a blatant router configuration page) besides misconfiguration.


FIOS was down for the whole neighborhood a few weeks ago and some Verizon technician has to come and fix it. Not sure if that has to do with anything.

#14 StarkWiz

StarkWiz

    Neowinian

  • Joined: 28-November 06
  • Location: Mumbai, India
  • OS: Windows 8 Pro 64-bit

Posted 20 May 2013 - 03:05

If the security was WEP then someone might have probably cracked your wep password and might have used the amped wireless range extender to connect to your wifi.
If it was open then there is no need to crack at all.
I am quite unsure why amped page might have shown up though because it shouldn't automatically unless you are connected to the range extender instead of your wifi.
It can depend on your DNS maybe.

#15 OP illegaloperation

illegaloperation

    Neowinian Senior

  • Joined: 24-October 09

Posted 20 May 2013 - 03:12

If the security was WEP then someone might have probably cracked your wep password and might have used the amped wireless range extender to connect to your wifi.
If it was open then there is no need to crack at all.
I am quite unsure why amped page might have shown up though because it shouldn't automatically unless you are connected to the range extender instead of your wifi.
It can depend on your DNS maybe.


The guy from Verizon factory reset my router a few weeks ago (the security default is WEP) and I forget to switch it back to WPA2 (facepalm)