Unsolved
This post is more than 5 years old
16 Posts
0
1398
January 6th, 2009 09:00
Router Access Logs
Please can you tell me how to identify if someone is attempting to logon to my wireless network. There is an intruder log but that appears to deal with internet intruders. I wanted to know how to find out if someone was attempting a dictionary attack on my network. Alternatively is there another way of ensuring that noone manages to by-pass the security on the router.
I have a Dell Wireless 2350 router and I am using the WPA security with a long password.
No Events found!
Larry R
2 Intern
•
1.7K Posts
0
January 6th, 2009 10:00
Open up teh router configuration page (http://192.168.2.1 if you haven't changed the local network address) and look at the "Device Status" page. At the bottom it will list all of the currently connected computers on your network, both wired and wireless, with their MAC address, assigned IP address, when the DHCP lease was granted. If you have extra connections, run ipconfig /all on your computers and compare the MAC (aka Physical) addresses to what is in the list on the route to see which is which since wired and wireless would be two different connections even if from the same computer.
Broooz1
16 Posts
0
January 6th, 2009 14:00
Thanks Larry
This shows who is connected so if I am lucky enough to check when someone is logged in that works. However someone could have found out my password with a dictionary attack and I wondered if there was a way of logging failed attempts to log into the network please?
Larry R
2 Intern
•
1.7K Posts
0
January 6th, 2009 14:00
It would be one of the advanced options if it was there, but I don't remember there being one.
You might consider enabling MAC address filtering on your router. You will need to collect the MAC addresses of all 'authorized' computers (easily done by running ipconfig /all on each computer). The MAC address is a 12 character hex value that is supposed to be unique to each network adapter (wired or wireless). In the MAC filter section, using a computer wired to the router, add the MAC address of the computer doing the changes first so you don't accidentally kick yourself of the network (you'd have to reset to router to "fix" that).
Alternately, you can enable MAC filtering with the option to allow all but the specified addresses (a deny list instead of an access list). Then look for the MAC address of whoever is connecting that you do not want on your network.