Contents ...
udn網路城邦
WiFi disconect frequently this week are some road repair,.. indoors wire mouse bite..-NO it is Hidden Network 18 SSIDs caused 更新10/25/2025
2025/10/23 14:54
瀏覽18
迴響0
推薦0
引用0
WiFi discnnect frequently this week are some road repair, router too old or dying, indoors wire mouse bite..-NO it is Hidden Network 18 SSIDs caused

10/22/2025 due to ISP company declared cant help us tonight 9:50s our internet broke. i immediately type in cmd by netsh wlan show networks mode=bssid and caught [Hidden Network] has 18 BSSIDs total 13 users including us. immediately called ISP to verify whether our area network broke, the man kind of 躲躲閃閃 wont directly answear it. i told him the Hidden Network had 13 SSIDs i did google search showed abnormal and suspicious. ISP should pay attention and verify whether from Hacker or is their employees might do bad things. he told me can he restart my modem because he cant do others as not rent their modem with router. during he did it i also made copy by netsh several times can see less and less SSIDs then wifi connected. the man declared can free charge to send technician on 10/23. in the past every year near by Oct-DEC such unusual internet broke after reported always sent technician for free but didnt solve any problem. deeply suspect on purpose created the 假像 so next year can increase monthly fee charge again. when they came always accused our router out of date must buy new then spouse disaputed as himself is internet field 老祖宗 knew very well not our equipments problem. this year got strong feeling they seemed force us to pay more either rent their equips or buy security protection. can be their people 自导自演 on purpose create wifi broke? i am thinking cancel the technican visit us tomorrow, when i told him give a copy of suspicious network names but they have to verify who are their people, clients (no need tell me their names and addresses..) or suspicious hackers. he answeared cant tell out. those suspicious hackers knew very well usa is umbrella system for hackers so 肆无忌惮 do whatever they want from top to bottom criminals. i also told him i would expose all i saw networks names to report police and post in my blogs. he kind of not against it. i knew neither ISP nor police department would help, the only way victims in usa can do is expose it in public medias. same as the old white woman told me kidnape happened several times in police station that she accused police is 共犯. ps from my posted [cant get any help from police dept who didnt know what form for victim suffered hacker control pc and iphone]

you can see why i 100% support 杜特尔特禁毒行动 because their 毒犯 bastards became 肆无忌惮 including their current master as umbrella.

what did i see network names before wifi broke tonight as :

SSID 2 : empty (ie Hidden Network)
Network type : Infrastructure
Authentication : WPA2-Enterprise
Encryption : CCMP
BSSID 1 : 3c:b7:4b:cc:2d:08
Signal : 14% Radio type : 802.11n
Band : 2.4 GHz Channel : 11
Basic rates (Mbps) : 6 Other rates (Mbps) : 9 12 18 24 36 48 54
BSSID 2 : 3c:b7:4b:cc:2d:0b
Signal : 14% Radio type : 802.11n
Band : 2.4 GHz Channel : 11
Basic rates (Mbps) : 6 Other rates (Mbps) : 9 12 18 24 36 48 54
BSSID 3 : 3c:b7:4b:cc:2d:0a
Signal : 14% Radio type : 802.11n
Band : 2.4 GHz Channel : 11
Basic rates (Mbps) : 6 Other rates (Mbps) : 9 12 18 24 36 48 54
BSSID 4 : b8:3e:59:8a:b2:f9
Signal : 100% Radio type : 802.11n
Band : 2.4 GHz Channel : 11
Basic rates (Mbps) : 6 12 24 Other rates (Mbps) : 9 18 36 48 54
BSSID 5 : 46:4e:5a:93:d1:38
Signal : 11% Radio type : 802.11n
Band : 2.4 GHz Channel : 6
Basic rates (Mbps) : 1 2 5.5 6 11 12 24 Other rates (Mbps) : 9 18 36 48 54
BSSID 6 : ce:94:35:56:c2:c4
Signal : 9% Radio type : 802.11ax
Band : 2.4 GHz Channel : 6
Basic rates (Mbps) : 1 2 5.5 11 Other rates (Mbps) : 6 9 12 18 24 36 48 54
BSSID 7 : d6:6c:6d:c7:db:09
Signal : 12% Radio type : 802.11ax
Band : 2.4 GHz Channel : 1
Basic rates (Mbps) : 1 2 5.5 11 Other rates (Mbps) : 6 9 12 18 24 36 48 54
BSSID 8 : 8e:12:65:5d:cb:c4
Signal : 7% Radio type : 802.11n
Band : 2.4 GHz Channel : 11
Basic rates (Mbps) : 1 2 5.5 6 11 12 24 Other rates (Mbps) : 9 18 36 48 54
BSSID 9 : 1a:c0:3e:e0:cd:41
Signal : 13% Radio type : 802.11n
Band : 2.4 GHz Channel : 6
Basic rates (Mbps) : 6 Other rates (Mbps) : 9 12 18 24 36 48 54
BSSID 10 : fa:d2:ac:03:91:f2
Signal : 8% Radio type : 802.11ax
Band : 2.4 GHz Channel : 11
Bss Load: Connected Stations: 0
Channel Utilization: 10 (3 %) Medium Available Capacity: 0 (0 us/s)
Basic rates (Mbps) : 6 12 24 Other rates (Mbps) : 9 18 36 48 54
BSSID 11 : 72:13:01:43:96:06
Signal : 11% Radio type : 802.11ax
Band : 2.4 GHz Channel : 11
Bss Load: Connected Stations: 0
Channel Utilization: 52 (20 %) Medium Available Capacity: 0 (0 us/s)
Basic rates (Mbps) : 6 12 24 Other rates (Mbps) : 9 18 36 48 54
BSSID 12 : 4a:bd:ce:d1:d8:0b
Signal : 7% Radio type : 802.11ax
Band : 2.4 GHz Channel : 11
Bss Load: Connected Stations: 0
Channel Utilization: 139 (54 %)Medium Available Capacity: 0 (0 us/s)
Basic rates (Mbps) : 6 12 24 Other rates (Mbps) : 9 18 36 48 54
BSSID 13 : 4a:bd:ce:d1:d8:0a
Signal : 8% Radio type : 802.11ax
Band : 2.4 GHz Channel : 11
Bss Load: Connected Stations: 0
Channel Utilization: 139 (54 %)Medium Available Capacity: 0 (0 us/s)
Basic rates (Mbps) : 6 12 24 Other rates (Mbps) : 9 18 36 48 54
BSSID 14 : 72:13:01:41:77:e6
Signal : 9% Radio type : 802.11ax
Band : 2.4 GHz Channel : 11
Bss Load: Connected Stations: 0
Channel Utilization: 79 (30 %) Medium Available Capacity: 0 (0 us/s)
Basic rates (Mbps) : 6 12 24 Other rates (Mbps) : 9 18 36 48 54
BSSID 15 : d6:94:35:56:c2:c4
Signal : 8% Radio type : 802.11ax
Band : 2.4 GHz Channel : 6
Basic rates (Mbps) : 1 2 5.5 11 Other rates (Mbps) : 6 9 12 18 24 36 48 54
BSSID 16 : 26:4e:5a:93:d1:38
Signal : 11% Radio type : 802.11n
Band : 2.4 GHz Channel : 6
Basic rates (Mbps) : 1 2 5.5 6 11 12 24 Other rates (Mbps) : 9 18 36 48 54
BSSID 17 : 90:bf:d9:4a:f2:3f
Signal : 6% Radio type : 802.11n
Band : 2.4 GHz Channel : 4
Bss Load: Connected Stations: 1
Channel Utilization:34 (13 %) Medium Available Capacity: 31250 (1000000 us/s)
Basic rates (Mbps) : 1 2 5.5 11 Other rates (Mbps) : 6 9 12 18 24 36 48 54
BSSID 18 : b6:70:5d:e4:3e:28
Signal : 7% Radio type : 802.11ax
Band : 2.4 GHz Channel : 1
Basic rates (Mbps) : 1 2 5.5 11 Other rates (Mbps) : 6 9 12 18 24 36 48 54

ps [Hidden network] this period frequently showing from 4 to 11 (our wifi broke), 13 (our wifi very slowly then broke), 15...tonight 18 (internet immediately broke)

13 users are : (Betser58, Burbujitas19) chingonA plus, suspicious COE COE-Public COE-PubSec (or COE-Secured switched), DIRECT-QU-VIZIOTV (suspicious stick to our channel no matter how i changed channels BSSID 1 : 02:6b:9e:83:82:af)
(Georges super wifi, Hazel_torres), Marianita77, MotherofDragons, My Wi Fi, TMOBILE-C2BA, suspicious Verizon_P9X3TD, wifinesse

(Betser58, Burbujitas19),(or COE-Secured switched), (Georges super wifi, Hazel_torres) in another 13 users after ISP restart my router [Hidden Network 18 became 15 SSIDs], MotherofDragons, My Wi Fi, COE COE-Public COE-PubSec 5 dropped off

right now 10/23/2025 12:36am became 10 users, Hidden Network has 8 BSSIDs, suspicious Admin, suspicious Castillo, chingonA plus, Georges super wifi, MotherofDragons, My Wi Fi, TMOBILE-C2BA, Verizon_46PBBS

searched [Hidden Network has 13 SSIDs, is is suspicious hakker?] Having 13 hidden SSIDs on a network is highly unusual and can be a sign of suspicious activity, including a possible hacking attempt. While multiple hidden SSIDs can have legitimate purposes, such a high number is not typical and warrants investigation.

--obviously it is not multiple hidden SSIDs (modern Mesh Wi-Fi)

searched [one Hidden Network has 18 SSIDs, is is suspicious hakker?] While seeing a single access point with 18 SSIDs (including hidden ones) is highly unusual, its not a definite sign of a hack. It is most likely the result of network misconfiguration or a complex, legitimate setup. However, because hidden networks and numerous SSIDs are not best practices for security, it is worth investigating... Why it could be related to a hack

While less likely, a large number of hidden SSIDs can be used for malicious purposes, and can be a sign that something is not right with your networks security.

Honeypots and rogue access points: Attackers could set up a device to broadcast many networks simultaneously. The goal of this is to lure unsuspecting devices into connecting to a malicious network, potentially stealing data.

"Security through obscurity" gone wrong: Hiding an SSID is a common practice for people who believe it improves security. In reality, it provides a false sense of security, and network sniffing tools can easily detect the networks name. Hackers know this and sometimes target hidden networks because they assume the owner has something to hide.

--our case 2 PCs and 2 iPhones (most time disconnected), 1 Roku with TV (few days very short time when spouse cant find good yutube shows), Printer (hardly connected for several years) we were cheated to pay more that were told band width not enough caused frequently wifi broke so from $20 up to $40 now. 感情 we pays for Hidden Network to abuse our network.

10/23/2025 1:24 am 13 users, the rest 12 users including [Hidden Network] signal became week very likely now they are 祸害 other victim network. Last time when i pointed out wifi broke because Hidden Networh has 11 SSIDs after that couple days those network names signal became very weak then happened again and again. the sympton is Hidden Network and DIRECT-QU-VIZIOTV signal became as strong as ours and more and more other network names (My Wi Fi ...) i deeply suspect they hacked into our router inner layer can wiped off my admin updated passwords in several data files. they tried very hard to forbid me login admin to change channels or else (block their MAC addresses).

10/23/2025 3:45am after i unpluged a device power then [Hidden Network] BSSID 4 : b8:3e:59:8a:b2:f9 ****** Roku, Inc.. Signal 100% disappeared, 6 SSIDs and total 10 down to 5 users. [Hidden Network] signal became very weak. due to we also have quite small device(Roku) so tried to disconnect to router by unpluged it. is it co-incidence or hacker use it control my PC ? ps the bigger one i thought were wireless Roku which turned out spouse bought external HD not connected to router.

searched [can it possible hacker thru our roku invade my pc?] it is highly unlikely for a hacker to invade your PC directly through a Roku device, due to the way the device is designed. However, a hacked Roku can be used as an entry point to compromise your Wi-Fi network, which then puts all connected devices, including your PC, at risk.

--maybe i solved the mystery admin password was wipped off 来源 that our roku was hacked.

How a hacked Roku could affect your PC

Because your Roku and PC are on the same home network, a compromised Roku could be a stepping stone for an attack.

Network infiltration: A hacker could use a vulnerable Roku to gain a foothold in your home network. From there, they could launch further attacks on other devices, like your computer, that are also connected to the network.

Credential theft: Hackers can exploit credential-stuffing attacks to gain access to your Roku account using passwords stolen from other sites. If you reuse the same password for your Roku account and other services, hackers could gain access to those accounts as well.

"Man-in-the-middle" attacks: A hacker on your network could potentially intercept data traveling between your devices, including sensitive information sent from your PC.

Searched [will hacker can any time switched file explorer, notepad versions with different time backed up my data files in their storage devices ?] Yes, if a hacker has control over your computer, they can potentially access and copy all of your data files, including different backed-up versions . The specific tools used, like File Explorer or Notepad, are just a means to an end; the core issue is that the hacker has gained deep access to your entire system.

In summary, the most important takeaway is this: If a hacker has compromised your system, your data is at risk, regardless of whether they used Notepad, File Explorer, or another method. The focus should not be on the specific applications but on the fact that your computers security has been breached. Heres a breakdown of what that means: A hacker with access has total control. If a hacker can access an application like Notepad or File Explorer, it indicates they have likely gained administrative or "root" access to your machine. This level of access bypasses the security of individual applications and allows them to do virtually anything they want. They can copy all your files. With system-level access, a hacker can browse, locate, and copy any data stored on your internal hard drive or any connected external devices. This includes your documents, photos, and any backup files you may have.

They dont need File Explorer or Notepad. The hackers access isnt limited to the same tools you use. They can use their own remote access tools to copy files without even opening a visible File Explorer window on your screen.

They can access your backup storage. If your backup is a connected external drive, a network-attached storage (NAS) device, or a cloud service with your credentials stored on the infected machine, the hacker can access your backed-up data as well. They can find and copy different versions of your files from your backups, not just the current ones.

Hackers wont leave obvious clues. In many cases, a skilled hacker will leave no obvious signs of their presence, like opening Notepad or File Explorer on your screen. They operate in the background to avoid detection and maximize the time they have to steal information.

In summary, the most important takeaway is this: If a hacker has compromised your system, your data is at risk, regardless of whether they used Notepad, File Explorer, or another method. The focus should not be on the specific applications but on the fact that your computers security has been breached.

searched [if the hacker thru my hacked roku, now i unpluged roku does the hacker still can invade my pc ?]

It is highly possible that a hacker who used your Roku could still have access to your PC
. Unplugging the Roku severs that specific devices connection to the internet, but it does not remove any malware or other exploits that may have been installed on your network or PC while the Roku was active.

Immediate steps to secure your network and devices

Disconnect everything from the internet. Unplug your PC, router, and all other internet-connected devices (smartphones, smart TVs, game consoles, etc.). This stops the hackers immediate access and prevents further network compromise.

Factory reset your router. Access your routers administrative page (the address is usually on a sticker on the device) and perform a factory reset. This will wipe out any malicious changes the hacker might have made.

Change all your passwords. Assume all of your passwords are now compromised. Use a different, strong, and unique password for every single account you have, starting with your router and email. A password manager can help with this.

Factory reset your Roku and all other smart devices. Once the router is secured, factory reset your Roku to remove any malicious software that may have been loaded onto it. Also, factory reset any other smart devices (cameras, assistants) on your network.

Clean your PC. While your PC is disconnected from the internet, run a full, deep scan with a reputable antivirus and antimalware program. To be absolutely safe, back up your files and perform a clean reinstallation of your operating system.

Enable two-factor authentication (2FA). For any online accounts that support it, enable 2FA to create an extra layer of security.

Monitor your accounts. Keep a close eye on your bank accounts and credit card statements for any unauthorized purchases. The recent Roku breaches were used to steal payment info and subscribe to streaming services
How the hacker could still have access

Malware on your PC: The most direct risk is that the hacker used the compromised Roku to gain a foothold on your network and then installed malware, such as a remote access trojan (RAT) or keylogger, directly onto your PC. This malware operates independently and will reactivate once your PC is turned on and connected to the internet again.

Compromised router: A sophisticated hacker could have compromised your internet router itself. If this happened, the hacker could gain access to all devices on your home network, regardless of whether your Roku is plugged in.

Password theft: If you reused the same password for your Roku account and other services, like your email or banking, the hacker could use "credential stuffing" to gain access to those accounts on any device. Roku has confirmed that hackers used stolen credentials from other data breaches in recent attacks.
--10/25/2025 I didnt do the above suggestions steps because exhausted and highly possible wont work or some not knowing how to do itand whether any side effects make worse. MS defender never can detect deadly virus while cant execute in safe mode with network connection. that i did before many times.

ps Over half a million Roku accounts compromised in second cyber security breach Roku customers endure a second cyber attack by Kurt Knutsson April 18, 2024 Recently, Roku has faced significant security challenges, with two separate cyber attacks occurring within a short span. The streaming giant confirmed that over half a million Roku user accounts were compromised through credential-stuffing attacks in a second incident....
--why didnt receive roku any warning email or else? Hackers control our email accounts !

searched [monitor hackers network names by netsh why i felt all those network names i saw are suspicious hackers? isnt those network names should be our neighborhood, they cant be all hackers, are they ?] While the network names you saw using netsh were likely from your neighbors, your feeling that they were suspicious is not unreasonable. Hackers can and do spoof network names to trick people into connecting to a malicious network, known as an "evil twin" attack.
--------------------------------- 10/25/2025 UPDATE
10/25/2025 the [DIRECT-QU-VIZIOTV (suspicious stick to our channel no matter how i changed channels BSSID 1 : 02:6b:9e:83:82:af)] thru other 11 users as : Hidden Network with 7 BSSIDs 3c:b7:4b:cc:2d:0b, 0e:c0:3e:e0:cd:41, ae:70:5d:e4:3e:28, 72:13:01:43:96:06, 3c:b7:4b:cc:2d:08,1a:c0:3e:e0:cd:41, 26:4e:5a:93:d1:38, wifinesse 3c:b7:4b:cc:2d:05, chingonAplus 40:a5:ef:c1:f3:1a (new 1st time showed up) Jeneve f0:ab:54:1e:aa:d8MITSUMI ELECTRIC CO.,LTD, TMOBILE-1650 18:a5:ff:0c:16:52, suspicious Admin 7a:45:58:c0:4e:83, suspicious COE 78:45:58:80:4e:83, COE-Public 7a:45:58:b0:4e:83 My Wi Fi (dc:36:0c:2f:10:e8, de:36:0c:2f:10:e0), Marianita 77 72:13:01:43:96:01, Hazel_torres 72:13:01:41:77:e1

--they all became low signals, some disappeared or switched then they all together showed up on 10/25/2025. now DIRECT-QU-VIZIOTV signal from weak became as strong as ours. ie break thru by : 10/25/2025 FW.WANATTACK (90 days 5 attacks) FW.WANATTACK DROP 199 attempts 10/25/2025 00:24:35 Firewall Blocked
FW.WANATTACK DROP 600 attempts 10/21/2025 06:35:49 Firewall Blocked
FW.WANATTACK DROP 100 attempts 10/14/2025 16:27:32 Firewall Blocked
FW.WANATTACK DROP 698 attempts 10/10/2025 02:02:05 Firewall Blocked
FW.WANATTACK DROP 100 attempts 10/03/2025 13:58:00 Firewall Blocked

the FW.WANATTACK cant be co-incidence but related. when i sensed why DIRECT-QU-VIZIOTV stick to us, Google searched declared it is our TV driver but more and more suspected it is hacker might pretend as driver to cheat/fool Google and victim.
today proved i am right especially spouse didnt turn on and unplug Roku, TV power connectors after [10/22-10/23 i unpluged Roku power connector, hours later he waked up and told him why unplug the power connector, he turned on tried to change Roku password then Hidden Network signal became as strong as ours, he turned off (Hidden Network signal back to low) not turn on since].
PS Google searched the AI answear would give different answear in differnt date or same day different time.

Searched [does VIZIO mac address is LAA ?] No, a VIZIO MAC address is not an "LAA"
searched [what is 02:6b:9e:83:82:af] 02 is 00000010 the second-least-significant bit is 1, this address is considered a locally administered address (LAA). searched [what is MAC address 02:6b:9e] indicates a locally administered address, not a globally unique one from a specific manufacturer. This means the device is using a randomized or private MAC address, and you cannot use a standard MAC address lookup to identify its vendor or origin.

Be alert the Hacker also use [Hidden Network] to pretend as ISP company offered. i knew it because we were Xfinity client which got serious connection problem and was told to connect to the company provide [Hidden Network]. ps lateryears found the company data leak event.

searched [did A-ISP provide Hidden Network ?] No,..in the sense of a secret or concealed internet service
searched [did Xfinity provide Hidden Network ?] Yes, Xfinity gateways provide hidden networks, which are separate, unbroadcasted SSIDs used primarily for Xfinity Home security systems and other video equipment.

限會員,要發表迴響,請先登入