I have a Debian server with a dyndns hostname and a open 22 port on my router (DLINK DSL-2640B) because i need to remote-ssh my server. The Debian machine itself is extremely secure but some hackers were able to hack into my router , in fact firstly i saw some weird open ports that I did not open , but i thought my colleague opened it so i did not really care about it. Next day i was not able to log in to my router..someone changed the password. My question is...is there a way to enable a maximum number of log-ins in order to prevent brute-force attacks? Interesting thing ..i had captcha enabled..how did they log in??

  • What router do you have? Remember to include all the relevant details in your question. If we have to ask for them, you're likely to get downvoted or have your question closed. – Michael Hampton Aug 25 '12 at 7:46

It is also a good idea to be on the lookout for security breaches/problems with your router, for example this one http://www.exploit-db.com/exploits/18511/. Most routers had some problems in the past, like the recent WPS problems on the Speedport W912V.

  • Oh my god unbelievable!! Thanks alot for the website! – Aaron Aug 25 '12 at 9:21
  • Hopefully d-link releases a new fw..this bug is pretty bad... – Aaron Aug 25 '12 at 9:31
  • Don't count on it. The product is listed as end of life and has never had a firmware update of any kind. – Michael Hampton Aug 25 '12 at 9:34
  • @Aaron: Now you just need to figure out which one of your LAN side colleagues is screwing you over. – user35787 Aug 25 '12 at 9:34
  • Don't forget to secure your Wi-Fi connection; that's part of your LAN from the router's perspective and the exploit could be done through Wi-Fi as well. – Michael Hampton Aug 25 '12 at 9:35

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy