View original (French)

Suspicion of network compromise / public IP

Terence75 Posted messages 1 Registration date   Status Member Last intervention   -  
brupala Posted messages 111145 Registration date   Status Member Last intervention   -
Hello,

I’m looking for help to analyze a suspected network / Wi‑Fi / public IP compromise, and to reset to a clean configuration so I can work from home securely.

Context
For some time I suspect my home network may have been compromised or targeted from the outside via my public IP address. I’ve already changed the modem/router and provider several times, but I’ve been told that my public IP address may stay the same or not renew automatically depending on the provider or line type.

I now want to understand how to set up a new, truly independent connection, with a new public IP if possible, without reintroducing risk from my old network.

What I want to do
My goal is to work intensely from home with a stable, secure connection: browsing, sensitive accounts, documents, online tools, AI, occasional video conferencing.

I want either:
- to use a new independent connection;
- or a 4G/5G box with a dedicated SIM;
- or a new fibre line / new truly separate subscription;
- without connecting this new connection behind the old box.

The devices I want to use on this new network have not been connected to the old suspect network.

My main questions
1. If an attack really comes from the outside via my old public IP, would a new independent connection with a new public IP be enough to stop that targeting?
2. If I take a 4G/5G box with a dedicated SIM, is that a separate Internet exit from my fixed box, with a different public IP or at least a different network assignment?
3. What could expose or compromise the new public IP?
For example:
- infected device reconnecting;
- old Google/Microsoft account compromised;
- open ports;
- UPnP enabled;
- remote administration of the box;
- DMZ;
- old Wi‑Fi SSID / old password reused;
- old extender, powerline adapters, printer or smart device reconnecting.
4. Would a new router plugged behind the old box be insufficient in this case, since it would keep the same Internet exit and likely the same public IP?
5. Which method do you recommend to properly verify:
- open ports;
- UPnP status;
- remote administration;
- connected devices;
- DNS used;
- any unwanted proxies or VPNs;
- Windows remote control software;
- suspicious browser extensions;
- active Google / Microsoft sessions?

Configuration desired
I would like to restart with a configuration like:
- new independent connection;
- new Wi‑Fi name never used before;
- new long, unique Wi‑Fi password;
- WPA2‑AES or WPA3;
- WPS disabled;
- remote administration disabled;
- UPnP disabled if possible;
- no open ports;
- no DMZ;
- only one clean PC and one clean phone at start;
- add other devices one by one only after verification.

What I don’t want to publish publicly
I prefer not to publish publicly:
- my public IP address;
- my personal address;
- my operator credentials;
- my captures containing personal information;
- my complete email addresses;
- the exact names of my Wi‑Fi networks.

Could you please indicate a reliable connection method? I’m fed up with not being able to work from home; I don’t even switch on my home phone... please kindly help me.

1 answer

  1.
    brupala Posted messages 111145 Registration date   Status Member Last intervention   14 448
     

    Hi,

    I get the impression that in your question you’re listing technical terms, or not, that you’ve read here and there without really knowing what they mean and how they’re used, like some kind of glossary of technical terms.

    I advise you to really think about what you want precisely, but basically, a few priorities you should study:

    If you want a truly private connection, forget mobile networks 4G/5G and focus on fiber.

    But even then, it’s worth asking your ISP for a non-shared IPv4 address; you should prefer Orange or Free at this level.

    You seem to forget that there is IPv6 beside IPv4 and that by default a public IPv6 address on a PC will change every day (privacy extension).

    IPv6 provides several billions of billions of addresses to use behind your box, typically 16 for a /64.

    Then, your other concerns: firewall: you should add a router or bridge firewall behind your box

    And there you go, there it is ....

    But damn, how tedious the line breaks are !!

    2