One of the most important pieces to connect to the Internet is the router. It is the device that allows you to connect multiple computers and have access to the network. This means that any problem that may arise compromises the security of not only this device, but also any other that you have connected. Therefore, we must take into account the importance of protecting it correctly. In this article we are going to talk about how to know if a router has been attacked .
How to know if the router has been attacked
It is important that we know if there are intruders in the router to avoid major problems. The fact that they could access the device means that they could take control, connect to the network, slow down the connection and even collect user information to compromise security.
Hackers can use different methods to attack a router, but they generally rely on vulnerabilities that are uncorrected. It could trigger what is known as DNS hijacking , which basically consists of altering DNS servers and redirecting users to pages controlled by attackers and thus stealing information.
They could also have access to the Wi-Fi network in case the wireless network password was hacked. This is precisely something common when a router is not well protected and could mean the loss of speed, quality and stability of a connection.
Now, many users may doubt if at some point they have attacked the router or if there are even intruders at that moment. Luckily we can take into account some aspects that can give us clues or even confirm that this has happened.
Configuration changes
We can observe possible intruders on the network, on the router, if we notice changes in its configuration . An attacker could modify some parameters such as the power of the device, MAC filters or even change the password to access both the device and the wireless network.
Any changes of this type that we notice could be the unmistakable sign that we have had or continue to have intruders on our network. We must therefore take action in that case.
Enter the router and see connected devices
One more way to know if there are intruders in our router is to directly access the device itself and see what equipment is connected. This information clearly shows us the number of users who are currently connected or who have been connected previously. All mobile phones, computers and any other connected equipment will appear.
This will depend on the type of router we have, but generally you have to access through the browser through the default gateway which is usually 192.168.1.1, then enter Advanced Configuration, Device Information and there search for DHCP .
Alternatively, we can also use external applications for both the mobile and the computer. These programs tell us which devices are connected to the wireless network at that moment.
Notice speed problems or outages
It is without doubt one of the most typical signs that something is wrong. We connect to the Internet and notice that the speed is not what it should be, that there are cuts, the device shuts down … In short, we notice that there are major failures when using the connection and the cause could be related to intruders.
When there are intruders on a Wi-Fi network, it could mean a loss of Internet speed. After all, they are users who are consuming available resources.
Check DNS leaks
One of the signs that our router has been attacked is when we see that there is a DNS leak . We can use tools that help us learn about this information and take action if we notice that something is wrong.
An example is DNS Leak Test . It is an online service that allows us to carry out a quick test or a more extended one to know where the requests made by our router pass through. In the event that an attacker has changed a parameter and we have strange results, it could be a sign that the device has been attacked.
Excessive flickering of the router lights
Although it is not a clear sign that there are intruders in the device, it can serve as a clue on some occasions. Typically routers have a series of LEDs that light up or blink depending on usage. For example if there are computers connected by Wi-Fi.
In case we do not have a great activity at that moment and we see that the light flashes constantly, it could be a sign that there is an intruder on the network.
How to avoid intruders on the router
We have seen some methods that we can use to know if we have suffered an attack on the router and therefore there could be intruders on our device. Now we are going to explain what we can do to make this happen. It is actually the most important thing, since if we take preventive measures we can avoid reaching the situation in which the connection works badly due to intruders on the network .
Luckily we can take into account certain important tips that we are going to explain. The sum of all of them will help us to ensure that our connection, our router in short, is completely protected.
Have the router updated to the latest version
Something very important and that many users overlook is the importance of always having the router updated. There are many vulnerabilities that can appear and compromise in one way or another the security of the device. Those flaws could be exploited by intruders and damage security. Therefore, it is essential that the router’s firmware is correctly updated to the latest version.
To update the firmware of the router we have to access the device, then go to Advanced Configuration, Management (management, administration, tools … depending on the model) and there to Update firmware or software. This will depend on the device, but the steps are similar.
Change factory settings
It is important that when we buy a router, when we acquire a new one when we change the operator, we change the factory settings . In this way we can improve security and avoid problems.
For example, we refer to changing the name of the wireless network, since it usually offers information related to the device model or even the company that we have contracted. This could make it easier for attackers, as they might know specific vulnerabilities of that router.
It is also important that we change the passwords, both to access the device and for the wireless network. In the next point we give tips to create them correctly.
Use passwords that are strong and complex
It is not enough to change the password that comes from the factory (something that is essential for our security), but we must generate keys that are really strong. They must contain letters (uppercase and lowercase), numbers, and other special symbols. All this in a random way and be unique.
We can make use of key managers that allow us to generate passwords that meet these requirements. The more complex it is and the more difficult it is to remember, the better.
But this must be applied both to the key to access Wi-Fi and also to enter the router. Both are very important and we must protect ourselves adequately.
Security encryption
Keep in mind that the password we use, no matter how strong, is not enough if we are using outdated security encryption . Today there are different alternatives and we must opt for current encryption, which does not have vulnerabilities.
It would be a mistake, for example, if the Wi-Fi password had a WEP encryption. This could allow a potential intruder with the necessary tools and knowledge to break that key.
In our router, in the section to change the wireless password, we can also modify the type of security encryption that we are going to use.
Periodically check connected devices
We have seen that by looking at the devices connected to the router we can detect possible intruders . This is something that we must do periodically if we want to maintain security and avoid problems.
As we say, we can do it both from the device itself and also when accessing through applications for mobile or computer. In both cases it allows us to have specific information about the equipment connected to the network.
Take care of connected devices too
But not everything is the router. We must also pay attention to all the devices that we have connected . Only then can we make our network perfectly secure. Having a computer, a mobile phone or any other equipment connected to the network and that has vulnerabilities, can be a major problem that would allow intruders to enter.
Especially pay attention to IoT devices. They are more and more those that we have in our homes and precisely this causes cybercriminals to use them to attack.
In short, having intruders on the router is something that could seriously damage our privacy and security on the network. We must know at all times what equipment is connected. We have seen some important tips to avoid compromising security and thus avoid problems.
