Attacks on network! Pls help to explain to me what these logs mean i have no idea :(

Dean Y

Reputable
May 24, 2015
2
0
4,510
Hey guys. I really need help. I think someone keeps trying to access my network. I dont really know about all these network things. I tried to used mac filtering and it somehow helps abit but now i think im dealing with some serious pro hacker or what. Here's my router attacks log. I really appreciate if someone would care to explain what these means. Thanks!

May 25 01:06:24 daemon.info: dnsmasq[32261]: read /etc/hosts - 3 addresses
May 25 01:06:24 daemon.info: dnsmasq[32261]: read /etc/hosts - 3 addresses
May 25 01:06:24 daemon.info: dnsmasq[32261]: using nameserver 1.9.1.9#53
May 25 01:06:24 daemon.info: dnsmasq[32261]: using nameserver 8.8.8.8#53
May 25 01:06:24 daemon.info: dnsmasq[32261]: using nameserver 2001:e68::b:68#53
May 25 01:06:24 daemon.info: dnsmasq[32261]: using nameserver 2001:e68:2005:29:202:188:0:133#53
May 25 01:06:24 daemon.info: dnsmasq[32261]: reading /etc/resolv.conf
May 25 01:06:24 daemon.warn: dnsmasq[32261]: running as root
May 25 01:06:24 daemon.info: dnsmasq[32261]: compile time options: IPv6 GNU-getopt no-ISC-leasefile no-DBus no-I18N no-TFTP
May 25 01:06:24 daemon.info: dnsmasq[32261]: started, version 2.41 cachesize 150
May 25 01:06:16 daemon.info: dnsmasq[31210]: read /etc/hosts - 3 addresses
May 25 01:06:16 daemon.info: dnsmasq[31210]: read /etc/hosts - 3 addresses
May 25 01:06:16 daemon.info: dnsmasq[31210]: using nameserver 1.9.1.9#53
May 25 01:06:16 daemon.info: dnsmasq[31210]: using nameserver 8.8.8.8#53
May 25 01:06:16 daemon.info: dnsmasq[31210]: using nameserver 2001:e68::b:68#53
May 25 01:06:16 daemon.info: dnsmasq[31210]: using nameserver 2001:e68:2005:29:202:188:0:133#53
May 25 01:06:16 daemon.info: dnsmasq[31210]: reading /etc/resolv.conf
May 25 01:06:16 daemon.warn: dnsmasq[31210]: running as root
May 25 01:06:16 daemon.info: dnsmasq[31210]: compile time options: IPv6 GNU-getopt no-ISC-leasefile no-DBus no-I18N no-TFTP
May 25 01:06:16 daemon.info: dnsmasq[31210]: started, version 2.41 cachesize 150
May 25 01:03:44 user.warn: kernel: wlan0: A wireless client (18:F6:43:8C:3E:EE) was rejected due to access control for 14 times in 5 minutes
May 25 00:58:51 user.info: syslog: dhcp6_get_options: unknown or unexpected DHCP6 option vendor class, len 14
May 25 00:58:44 user.warn: kernel: wlan0: Open and authenticated
May 25 00:58:44 user.warn: kernel: wlan0: A wireless client is associated - 54:27:1E:20:3A:53
May 25 00:58:44 user.warn: kernel: wlan0: WPA2-AES PSK authentication in progress...
May 25 00:58:44 user.warn: kernel: wlan0: A wireless client is associated - 54:27:1E:20:3A:53
May 25 00:58:44 user.warn: kernel: wlan0: Open and authenticated
May 25 00:58:44 user.warn: kernel: wlan0: A wireless client is associated - 24:A0:74:37:6A:F6
May 25 00:58:44 user.warn: kernel: wlan0: WPA2-AES PSK authentication in progress...
May 25 00:58:44 user.warn: kernel: wlan0: A wireless client is associated - 24:A0:74:37:6A:F6

p/s: i actually used the mac filtering to block of the the mac address (18:F6:43:8C:3E:EE) then i think the person is going hard at my router or some crazy shit. sorry. pls help me :(
 
Solution
the top part are entries for DNS servers (the one ending in #53) which are fine.

A system with MAC address 18:F6:43:8C:3E:EE has been denied access.

the systems with MAC addresses 24:A0:74:37:6A:F6 and 54:27:1E:20:3A:53 have authenticated and connected.
the top part are entries for DNS servers (the one ending in #53) which are fine.

A system with MAC address 18:F6:43:8C:3E:EE has been denied access.

the systems with MAC addresses 24:A0:74:37:6A:F6 and 54:27:1E:20:3A:53 have authenticated and connected.
 
Solution

Dean Y

Reputable
May 24, 2015
2
0
4,510



oh i see. So i dun have to worry anymore. Thanks alot for ur help! :)