Location:
State:
Carrier
Country
Status

How to check if someone is attacking my network


Hello,

I was wondering if it's possible for attackers to cling to your network and maybe even configuring routers settings so that they can silently see what your'e doing, and can I check for that?

For example if you entered some dubious websites.

My internet is not working right lately so I was wondering if maybe I've got someone "invisble" spying or doing something else with my network (There are a few computers connected to my network)

Ty

You can try entering your router to see what's connected. In a browser type 192.168..1.1 in the address bar and hit enter. If asked for a user name and password try admin for user name and password for the password. I would also do a virus scan and I would also check for malware with Malwarebytes Anti-Malware. Malwarebytes | Free Anti-Malware & Malware Removal

You could also try rebooting your cable modem and router. On my system I unplug my Comcast cable modem and remove the battery. Then I unplug my router. I leave them unplugged for about a minute or two. Then I replace the battery and plugin the modem. I let the modem reload then I plug my router back in and let it reload. It doesn't happen very often but there have been times I lost my internet speed and resetting brings it back.

You can try entering your router to see what's connected. In a browser type 192.168..1.1 in the address bar and hit enter. If asked for a user name and password try admin for user name and password for the password. I would also do a virus scan and I would also check for malware with Malwarebytes Anti-Malware. Malwarebytes | Free Anti-Malware & Malware Removal
Thanks, under what menu entry in the router's setup page should it be? (To see what's connected)

You could also try rebooting your cable modem and router. On my system I unplug my Comcast cable modem and remove the battery. Then I unplug my router. I leave them unplugged for about a minute or two. Then I replace the battery and plugin the modem. I let the modem reload then I plug my router back in and let it reload. It doesn't happen very often but there have been times I lost my internet speed and resetting brings it back.
But will that force all others to quit? Or they already have the DNS or stuff like that?

Someone would have to setup another access point to trick your computer to think that one is yours. Then all that they do is set up packet capturing with a set of Linux tools that are mainly for troubleshooting.

In router page check for something that shows 'Network status' or 'DHCP clients'

you may use a 3rd party software such as detection agent from Main - Who Is On My WiFi

Thanks, under what menu entry in the router's setup page should it be? (To see what's connected)



But will that force all others to quit? Or they already have the DNS or stuff like that?
On my Netgear router it's under Attached Devices.



Every time I had to reset my modem and router all my devices automatically reconnected.

Thanks guys!
so it seems right, but I still get many sudden - short period disconnections, and in the browsers it tells me that DNS server stopped responding or something like that - could it then be a problem with the internet provider or infrastructure/bad network hardware or cable, rather than an attacker?

You may want to change your Primary and / or secondary DNS server address to one of the larger public ones in your router ...

Google have 8.8.8.8 and 8.8.4.4 available for free Public DNS Google Developers

some ISP supplied routers will not allow this so would need to be done at the Device level

How to check if someone is attacking my network