Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm not talking about trying to crack the encryption key, but if malware got onto your computer, and attempted to brute force your router's login password. I know that the majority of people are using admin/password, but for those that aren't, do router's limit the number of login attempts? I only have one router to test, and it doesn't appear to restrict it. I was just wondering if anyone with more expertise with networking knew if there were security features to prevent this.

The only reason I could think of for doing this would be to keep persistent access in case of the malware being removed, once you have the credentials you can upload a malicious firmware, the router could launch attacks. Since the malware would already be on a computer behind the router, I couldn't think of another reason to infect it, except for maybe a botnet. I've heard of malicious firmware being used for stuff, but I doubt that much of the stuff littered across the internet would do something like this.

share|improve this question
In my experience, many consumer-grade routers do not protect against this. – user3463 Aug 14 '12 at 5:08
Not on my Netcomm - its unlimited and there isn't even a time delay. I think your thinking of enterprise grade routers from Cisco. – Jeremy Thompson Aug 14 '12 at 5:54
Agree with Jeremy on this. Maybe you should rather look into Enterprise Solutions – David Murray Aug 14 '12 at 7:35
As per Randolph comments, some can - Cisco implement something called AOIP (anything over IP) (although I don't think AOIP is specific to Cisco). As the name implies, it means anything from any IP address is monitored/looked at etc (depending on the settings). I hope this helps. – Dave Aug 14 '12 at 7:46
up vote 0 down vote accepted

I've done some searching with Google and everything I find (along with the comments on this question) indicates that consumer routers do not implement any preventive measures against login brute force attacks.

share|improve this answer

Even the most basic consumer routers have the ability to only accept connections from specified MAC Addresses. Setting up MAC Address Filtering should at least protect you from wireless hack attempts.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .