Botnet Attack on BSNL Broadband network

[Sushubh]

as mentioned in the other thread... bsnl confirmed it.


Source

 

[vishalrao]

My LCO visited me just now to tell me to make the following changes to my OptiLink ONT:

1. Change default IP away from 192.168.1.1
2. Set firewall setting to "high" level.
3. Block Telnet and HTTP incoming access.
4. Change default login password away from admin/admin.

Made those changes but firewall setting to HIGH causes problems with some websites like speedtests so I changed it back to LOW.

Even though my ONT is OptiLink I don't (yet) have any firmware update with that captcha in login screen and I forgot to ask LCO whether any firmware update is coming or not.

My LCO's OLT is also OptiLink brand he informed me today.

I just hope BSNL staff are able to enable restore full browsing speed for individual LCO/OLT at a time, else will have to wait for ALL nationwide OLTs to be restored and that will take a hell lot of time!

 

[vishalrao]

Someone with a Hathway connection mentioned to me that he got an email from Hathway last week asking to change default username/password on their devices. So other ISPs also must be either under attack or taking precautions due to knowing BSNL's situation.

 

[vignesh_venkatesan]

I have a Local Isp here at Chennai.
My lco has also informed me to change those things.
He was quite shocked when I informed him that I run separate router with a enterprise grade firewall so no probs.

 

[Dark_Nate]

@vignesh_venkatesan Does he know what's an enterprise grade firewall?

 

[vignesh_venkatesan]

He's quite tech savage and understand things way better than bsnl guys.
He's an engineer by education and runs his father's cable network.

 

[Dark_Nate]

@vignesh_venkatesan I'm surprised an "engineer" is surprised by a customer using their own hardware firewall.

But personally, why do you need one? I can't even ping or establish any kind of connection to my router with simple SPI and disabled ICMP global ping. Unless the NSA is targetting you.

 

[vignesh_venkatesan]

I got an pfsense box from my friend who was upgrading it.
So been tinkering around it for the last few weeks.

 

[Dark_Nate]

It adds latency though. It doesn't actually matter, but with Indian ISPs' routing performance, it does, unfortunately. Unless I'm wrong?

I've challenged many wannabe hackers in my local area to break into my network, nobody could even after I give them the IP address allocated at the time
At the most, they can break through WPA2 due to unfixable vulnerabilities, but even then it'll take days or weeks due to 30 character long random string.

 

[vignesh_venkatesan]

Many exploit the WPS Key vulnerability and connect to wifi on older ap's and think themselves as an hacker