Author Topic: Lots of network intrusions  (Read 650 times)

Offline radarradar

  • Newbie
  • *
  • Posts: 17
Lots of network intrusions
« on: December 25, 2021, 10:06:22 AM »
Hello
My wireless network was hacked into a few weeks ago, and i wonder if my network is still compromised?
I added some screenshots of my concern:
This goes on forever since i installed firewall today.
« Last Edit: December 25, 2021, 10:13:20 AM by radarradar »

Offline Ploget

  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 2030
  • 'Your best teacher is your last mistake'
    • Schneier on Security
Re: Lots of network intrusions
« Reply #1 on: December 25, 2021, 11:14:22 AM »
What do you mean your 'Wireless Network as hacked'? Have you checked the Firewall logs?
https://help.comodo.com/topic-72-1-766-9172-General-Firewall-Settings.html
Ploget

Win10 x 64 Pro - 21H1 (19044.1682) / CIS 12.2.4.8032 / WiseVector StopX
Win11 x 64 Pro - 21H2 (22000.493) / CIS 12.2.2.8012
Comodo Forum Policy
“If you think you are too small to make a difference, try sleeping with a mosquito”

Offline radarradar

  • Newbie
  • *
  • Posts: 17
Re: Lots of network intrusions
« Reply #2 on: December 25, 2021, 12:20:44 PM »
Hacker spoofed mac address of my wifi camera and gained control of both router and powerline. I did a full format of pc after that. Two of the screenshots are from the firewall events log today.
« Last Edit: December 25, 2021, 12:23:55 PM by radarradar »

Offline C.O.M.O.D.O RT

  • Comodo Staff
  • Moderator
  • Comodo's Hero
  • *****
  • Posts: 693
Re: Lots of network intrusions
« Reply #3 on: December 27, 2021, 08:44:47 AM »
Hello
My wireless network was hacked into a few weeks ago, and i wonder if my network is still compromised?
I added some screenshots of my concern:
This goes on forever since i installed firewall today.
Hi radarradar,

Thank you for reporting, Does the attached firewall event entries are still listed in current date ?

Thanks
C.O.M.O.D.O RT

Offline radarradar

  • Newbie
  • *
  • Posts: 17
Re: Lots of network intrusions
« Reply #4 on: December 27, 2021, 02:33:03 PM »
What do you mean?
I did new format and still lots of ARP requests in the log.

Offline C.O.M.O.D.O RT

  • Comodo Staff
  • Moderator
  • Comodo's Hero
  • *****
  • Posts: 693
Re: Lots of network intrusions
« Reply #5 on: December 28, 2021, 03:43:58 AM »
What do you mean?
I did new format and still lots of ARP requests in the log.
Hi radarradar,

We will reach you through private message to get required information for further investigation.

Thanks
C.O.M.O.D.O RT

Offline C.O.M.O.D.O RT

  • Comodo Staff
  • Moderator
  • Comodo's Hero
  • *****
  • Posts: 693
Re: Lots of network intrusions
« Reply #6 on: December 28, 2021, 06:00:50 AM »
Hi radarradar,

Could you please check your inbox for private message and respond .

Thanks
C.O.M.O.D.O RT

Offline futuretech

  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 5324
Re: Lots of network intrusions
« Reply #7 on: December 28, 2021, 09:04:47 AM »
What do you mean?
I did new format and still lots of ARP requests in the log.
Just disable anti-arp spoofing as it is not really needed for home networks, what you are seeing is normal ARP packets being blocked due to the way anti-arp spoofing now works, it blocks many legitimate ARP packets than it did before in older versions of CIS.

Offline radarradar

  • Newbie
  • *
  • Posts: 17
Re: Lots of network intrusions
« Reply #8 on: January 01, 2022, 06:01:09 AM »
Just disable anti-arp spoofing as it is not really needed for home networks, what you are seeing is normal ARP packets being blocked due to the way anti-arp spoofing now works, it blocks many legitimate ARP packets than it did before in older versions of CIS.

You are probably right, i have not had any problems lately.

 

Free Endpoint Protection
Seo4Smf 2.0 © SmfMod.Com Smf Destek