How do I find out who is hacking my WLAN?

[Riktar]

While I am not to keen on someone freeloading off my WLAN I am getting really steamed about the bastard taking over my router. I still haven't figured out how the cretin got the password for my router but he/she did.

There are not allot of homes in my area so the list of suspects is less than the fingers on 1 hand.

Rather than banging on doors I want to find some way or device I can use to "point" me in the right direction. Then I will knock the damn door down.:mad:

Any ideas?

[Alan87i]

Can you still log into the router and save the log file?
If you can do it.
I can't be as much help on this topic as others can , but I can tell you I would do a hard reset on the device. Then re configure it completely .
Starting buy giving it a new Log in IP address.
Login user name (if possible ) and pass word , (random letters and numbers) LONG as possible.
Set the wireless security to the highest level it has.
Then to help even further you could try mac address filtering.
This is a slow process to set up but it does work.
There's one need program that is trial ware but will work for 30 days I think.
It's called CC Get Mac Address. I have v2.2 works great. You set the parameters of your dhcp table , and have it scan the network.
It will list the IP and mac address of every device connected and powered ON with in your network.
This will help you find the mac's for all of your devices To add in the filter. If 1 extra pops up your hacker is online on your network and you have his mac address. But I bet he's spoofing it as well.
WireShark is free ware and will scan packets from the host PC. I have little knowledge on using this software but it will list every packet with source and destination from the pc it's running on.
The Pros will amend and add some tips for you , I feel the Burn Mr. Riktar
Another thing to think about is getting a new router Different brand .
Configure it like I mentioned above and stick your old one in the attic by the window plugged into nothing but power. And let the hacker waist his time on it. LOL
Allan
VA2CBE

[M/Q]

Allan presented all good ideas, but I would like to know more about your setup before getting too specific. What is the router brand and model? What is the Internet access method? Did you change the default settings on the router? What does your network look like upstream and downstream of the router?

If this router is on the Internet perimeter, it may have been owned via the Internet and not through the internal side. Also you need to take a hard look at your internal network devices as they may have been compromised, thus allowing an outsider to gain access to your systems.

[Andrej Komarov]

Alan87i 's advice is not very actual. For example:

- hacker will "stealthy" monitor wireless networks (no WIDS systems (they are expensive for home, active scanner's detectors will not see hackers activity)
- when he finds you WLAN, he will spoof his MAC on fake MAC or AP's MAC :)
- WLAN hacking and gaining access to it with spoofed MAC from big distance with directional antenna