Someone keeps hacking my network

[Barbarian Conan]

With all due respect, please refrain from assumptions as I’m in the situation not you, and I did state there’s much more to what I mentioned above…. the reason I wouldn’t share more is quite obvious as is this a public forum.

The kid saying he's going to hack you because you called his mom fat when he killed you in CoD was lying dude.

 

[Pineapple Smurf]

Maybe OP is a member of parliament

 

[r00igev@@r]

Maybe OP is a member of parliament

That explains the burn.

 

[SauRoNZA]

5o : to (l33tspeak, I mean typo)

Pihole: add second NIC (USB) to pi and install software (pihole) to log all network activities. Basically enabling you to do packet inspection

Unless something changed PiHole only does DNS.

It’s not a gateway and therefore can’t do packer inspection as it doesn’t manage packets.

AdGuard is also much more user friendly and tends to work more reliably in my experience.

 

[SauRoNZA]

You are right about thermal shutdown. Its a big and overlooked problem. Usually I rely on SNMP polls to measure it but lately I have been using something called uptime kuma.
You can configure a pi and run docker for it. Same pi can run docker pihole. All I need to do is develop a push script for temperature. Have done one for speedtest but will do the temperature one and see who it works.

Didn’t know Uptime Kuma can do temperatures. I must go look into that.

 

[SauRoNZA]

Haven't ever used that but it looks extensive. They don't have a local CDN presence so no. Like zoom. Bliksems must word wakker.
I actually have ublock origin in my browser as a fail safe. My own internet runs through a hardened debian buster stack that has threat intelligence. The closet consumer class stack would be the ASUS merlin (as an alternative) which has some decent ability to customize,

Only their hosted DNS doesn’t have local CDN.

The one you host yourself just like PiHole obviously runs locally and can point to any DNS you fancy.

AdGuard hosted would be better for most normal people who aren’t going to host their own thing, even without local. Especially for parents to just add some safety net on kids devices by default.

 

[airborne]

The granddaddy is https://www.reddit.com/r/TronScript/
You just need a couple of hours. It scrubs more vigorously than omo!

That looks interesting, what is that?

 

[r00igev@@r]

Didn’t know Uptime Kuma can do temperatures. I must go look into that.

Use a push script.

Edit: I'll post the script when I'm done. Interested in the speedtest one????

 

[r00igev@@r]

That looks interesting, what is that?

Its a wrapper for multiple windows scrubbing tools which it runs sequentially.

 

[r00igev@@r]

This is the push script for jessie - the one for buster is different but will do that later

#!/bin/bash
acceptable=60
note=`/usr/bin/sensors`
temperature=$( echo $note | sed 's/^.*0: [+]//; s/[°]C.*$//')
echo $temperature
if [[ "$temperature" < "$acceptable" ]]; then
curl -k -s "http://a.hole.com:3383/api/push/vQtT9LzPBv?msg=OK&ping=OK&ping=$temperature
fi

 

[rh1]

@proximiti99 were you able to come right?

 

[Herr der Verboten]

Maybe OP is a member of parliament

or girl-qaeda

 

[Dimpie (JIGSAW)]

<>

I have Zone Alarm with firewall on all Windows devices, and my sons gaming PC (the oldest device) has over 22000 attacks blocked.

<>

Uninstall that crap

 

[Gnome]

What others have said, this is just from a single minute just now on my firewall. Lots of blocked connections != hacking.


(igb1 is my fiber port, so some devices on the network doing DHCP I guess; EDIT: Oh it is some sh#tty mikrotik proto for discovery (mikrod!ck more like it)

With all this called out, let's play devil's advocate.
Steps to mitigate: (no sarcasm)
- Format every single device on your network at the same time (while keeping the others turned off), to remove any virus/root kit/etc. that is providing access. If you don't turn everything off, they'll possible get re-infected.
- Get a better router before doing above and change default passwords + deny WAN access to any configurations (including ISP access ports)

 

[Y'all Qaeda]

Just install Norton anti-virus, then use the crypto mining malware they install to buy better equipment.

 

[gotaway]

It’s a Netgear DGN2200m. Haven’t been scammed on emails. Not familiar with wireshark but will investigate and send you logs when possible.

Thank you

His last reply. The hacker must have encrypted his keyboard