How do you counter a death attack

Lynxlyon · 06-27-2018, 01:12 AM

So basically, there are about 30 morons near where I live who keep sending me deauthentication attacks every 10 minutes or so. In particular when I start airodump.

I tried dropping their packets using iptables, but I’m still being disconnected.
(When someone is sending packets, their data packets on airodump is very high, higher even than mine, so I tried blocking their Mac addresses). But it did not work.

Any idea people?

wpeckham · 06-27-2018, 05:51 AM

Who is providing the WIFI? The provider should be involved in solving this.
What is the security on this WIFI? WPA-PSK is the minimum I would recommend.

onebuck · 06-27-2018, 10:24 AM

Moved: This thread is more suitable in <Linux - Wireless Networking> and has been moved accordingly to help your thread/question get the exposure it deserves.

TB0ne · 06-27-2018, 11:26 AM

Quote:

Originally Posted by Lynxlyon

So basically, there are about 30 morons near where I live who keep sending me deauthentication attacks every 10 minutes or so. In particular when I start airodump.

I tried dropping their packets using iptables, but I’m still being disconnected.
(When someone is sending packets, their data packets on airodump is very high, higher even than mine, so I tried blocking their Mac addresses). But it did not work.

Any idea people?

Why, exactly, are you surprised that this is happening? You say nothing about your environment, but there are a good number of well-set-up networks that detect things (like jokers using airodump and other wifi hacking tools), and drop them.

Do these same 'morons' drop you when you're NOT using airodump???

Lynxlyon · 06-27-2018, 04:05 PM

Well I have WPA2, so encrypted. My wifi provider is bell.

And starting airodump should not drop your connections.

A simple scan. I get internet connections dropped, and CD traps popping out. Last I check, that was a chor doing their work.
And like I said, on airodump, the packets sent over my network would be like 5 and that sent over the others would be like 300.

Way more than mine even

TB0ne · 06-27-2018, 06:20 PM

Quote:

Originally Posted by Lynxlyon

Well I have WPA2, so encrypted. My wifi provider is bell.

Your ISP is not your environment. Is this your home network, dorm, business, public, what??

Quote:

And starting airodump should not drop your connections.

Wrong; it COULD be the trigger. As stated, a well monitored/managed network detects such things, and actively PREVENTS them. How it does that varies...could be a disconnect, could be a MAC address permaban, could be someone visiting your location and asking what you're up to.

Quote:

A simple scan. I get internet connections dropped, and CD traps popping out. Last I check, that was a chor doing their work. And like I said, on airodump, the packets sent over my network would be like 5 and that sent over the others would be like 300. Way more than mine even

So then back to "a managed and monitored network", since it's obviously not traffic based, but behavior based.

Lynxlyon · 06-28-2018, 10:44 PM

Well, my CD tray also pops out. I think that’s a hack.

But assuming you’re right, what do I do? Move on to playing on another network?

TB0ne · 06-29-2018, 09:08 AM

Quote:

Originally Posted by Lynxlyon

Well, my CD tray also pops out. I think that’s a hack.

Really?? Much more likely than some dust in a microswtich, or accidentally bumping the eject button, right??

Quote:

But assuming you’re right, what do I do? Move on to playing on another network?

You don't 'play' on networks....that is a great way to get banned/arrested. If you want to use airodump and other such tools, you have ONE NETWORK to do it on....YOUR OWN. That's it, unless you're getting paid to do network security testing.

dugan · 06-29-2018, 09:24 AM

Quote:

Originally Posted by TB0ne

Your ISP is not your environment. Is this your home network, dorm, business, public, what??

Quote:

Originally Posted by TB0ne

Do these same 'morons' drop you when you're NOT using airodump???

Could we have clear answers to these please? These are important.

I mean, one way to read your question is that you're running cracking tools on other people's networks, you think you're getting caught and counterhacked by "30 morons", and you're asking how to avoid getting counterhacked. That's not what you're asking, is it?