Possible Cisco Router Hack?


NikolaeVarius
25/12/2015 9:47 am
HOME ยป Network & Servers

We have a Cisco EPC3928AD EuroDocsis 3.0 2-PORT Voice Gateway from our ISP. The router is connected to a firewall (an Ubuntu-box running iptables and Wireshark). Our LAN (10.0.0.1/24) is beyond the firewall. No other equipment is connected to the router. The router's WIFI has been disabled.

A few days ago we noticed problems when fetching mail or browsing. The connection started to get slower and sometimes we do not have a connection at all. This behavior seem to occur at random and during irregular time periods (1-30 minutes approx.). All equipment on the LAN is affected. Certain services like Skype are not affected.

The ISP did a checkup of the router and the connection to the rest of the WAN. They found no problems, neither with the modem itself nor the signal strength or the cable. They also set up monitoring of the WAN segment that the modem is on and that ran for several days without finding any problems.

Our LAN has no DHCP. We also had the DHCP in the modem was switched off. The NIC on the firewall facing the WAN was set to 192.168.0.201. Although our LAN has static addresses and DNS configurations on each NIC are set to the ISP's recommended DNSs, they told us that activating the DHCP in the router "sometimes helps"...

We proceeded to activate the DHCP with starting address 192.168.0.201 and with a range of 1. We also reserved 192.168.0.201 for the MAC of the NIC facing the modem. What happened next puzzled us: in the router's "Preassigned DHCP IP Addresses"-list an unknown MAC, 00:11:e6:de:ad:07 (00:11:e6 belongs to Scientific Atlanta, part of Cisco), was occupying 192.168.0.201. Moreover, in the router's "Connected Devices Summary", the same MAC was showing up, but this time with an IP (10.0.0.74) on the LAN!

We restarted the router, but to no avail. The same unknown MAC showed up again, this time with a LAN address (10.0.0.2) already in use by a workstation on the LAN. Blocking the MAC in IP-tables made the MAC disappear from the "Connected Devices Summary", but is still in the "Preassigned DHCP IP Addresses"-list. We have set the IP-range to 2, so it now occupies 192.168.0.202 instead of 192.168.0.201.

Restarting the router or disconnecting it from the firewall does not help. The unknown MAC keeps on reappearing. The intermittent problems with the connection persist. What is going on? Is this a hack of some kind? Any input will be much appreciated.


Related to : Possible Cisco Router Hack?
Possible Cisco Router Hack?
25/12/2015 9:47 am by NikolaeVarius in Network & Servers

We have a Cisco EPC3928AD EuroDocsis 3.0 2-PORT Voice Gateway from our ISP. The router is connected to a firewall (an Ubuntu-box running iptables and Wireshark). Our LAN (10.0.0.1/24) is beyond the firewall. No other equipment is connected to the router. The router's WIFI has been disabled.


[ubuntu] Cisco Cable Modem and Cisco Router Issue
by cengel4 in Network & Servers
I have one computer connected to port one router that I can not see in my home network with other computers connect to other router. I assume its an IP address and Gateway issue. How do I setup so I can see it with other computers. How do I configure so I can see computer hooked to both routers?
Cisco & HP Switch and Cisco Router >>>NEW ARRIVAL!<<<
by Mihai Mocanu in Network & Servers
WTS: Cisco & HP Switch and Cisco Router >>>NEW ARRIVAL!<<<
 
Working Condition! Will Test and Restore to factory default for you!
Cisco 1841 Router - In Stock x [ 1pcs left ] $220 Per Pcs
Cisco WS-C2950-24 Port Switch - In Stock x [ 1pcs left
[ubuntu] Connect to share createc by router (Cisco X3000 DSL router)
by sjwaste in Network & Servers
Hi There,
I have been trying to connect my linux machines to the share created by my router (Cisco X3000 DSL router). It is a 1TB USB drive connected by USB - if that is important to know.
I set up the share in router setup and I can see it on the network if I use:

Two connections 1 router confusion, router recommednation of cisco fix
by Nandor Devai in Network & Servers
Dear All,
I have been having a problem for over a couple of years now, we have 2 DSL connections connected directly to a Cisco 2811 router.
The problem is, we are unable to make quick changes (NATing /Port forwarding/ etc) to it because we are not knowledgeable in setting it up via it's c
Dual wan configuration (actiontec router - cisco router)
by SeaSerpent in Network & Servers
I have the cisco rv082 dual wan router. I'm using the isps comcast cable and verizon dsl. Comcast cable in wan 1 works perfectly, I have no issues with that. Wan 2 is the problem.
Verizon is hooked up in Wan 2 through their actiontec GT784WNV router. I've enabled rfc1483 transparent bridging on
Adding a wireless router to a Cisco wired router
by Glenntoy in Network & Servers

Hello,
I am in a fix, I need to add a Belkin wireless router model F5D7231-4 to a Cisco Router Model 2600. My network is DHCP and Static.
I have tried several different methods. 1 as an access point and one just as a router.
The only way I can get it to work is to connect
linux router vs cisco router
by you2 in Network & Servers
Hello!
i'm new to the networking world, i have 6 month experience with cisco routers and switches and recently i got my CCNA.I am wondering...what is best? linux router or cisco router; the major drawback to cisco products is their price...and on the other hand linux is free, you only need a se
Linux PC router to Cisco Router
by turret in Network & Servers
Masters,
I come in Peace..
I got this problem, I have two ip blocks (221.23.43.12/30) and (61.14.23.42/28) now using a cisco router (cisco 2851) to be exact I was able to make the two ip blocks a public ip addresses using this code :
ip route 0.0.0.0 0.0.0.0 221.23.43.13 (presuming
Plugging a Cisco router into another router
by Dirigible in Network & Servers
Hello,
My friend has a crappy wireless router, and I live 3 apartments away, too far to use his network. I bought a Cisco E2500 and 200 feet of CAT5 cable. I ran a line from one of the 4 ethernet out ports on the back of his router, out the window, across the roof (involving some night-time ni
Privacy Policy - Copyrights Notice - Feedback - Report Violation - RSS 2014 © bighow.org All Rights Reserved .