Welcome
Username or Email:

Password:


Missing Code




[ ]
[ ]
Online
  • Guests: 29
  • Members: 0
  • Newest Member: omjtest
  • Most ever online: 396
    Guests: 396, Members: 0 on 12 Jan : 12:51
Members Birthdays:
No birthdays today

Next birthdays
05/11 ramses (16)
05/11 Arcstarter (31)
05/11 Zak (15)
Contact
If you need assistance, please send an email to forum at 4hv dot org. To ensure your email is not marked as spam, please include the phrase "4hv help" in the subject line. You can also find assistance via IRC, at irc.shadowworld.net, room #hvcomm.
Support 4hv.org!
Donate:
4hv.org is hosted on a dedicated server. Unfortunately, this server costs and we rely on the help of site members to keep 4hv.org running. Please consider donating. We will place your name on the thanks list and you'll be helping to keep 4hv.org alive and free for everyone. Members whose names appear in red bold have donated recently. Green bold denotes those who have recently donated to keep the server carbon neutral.


Special Thanks To:
  • Aaron Holmes
  • Aaron Wheeler
  • Adam Horden
  • Alan Scrimgeour
  • Andre
  • Andrew Haynes
  • Anonymous000
  • asabase
  • Austin Weil
  • barney
  • Barry
  • Bert Hickman
  • Bill Kukowski
  • Blitzorn
  • Brandon Paradelas
  • Bruce Bowling
  • BubeeMike
  • Byong Park
  • Cesiumsponge
  • Chris F.
  • Chris Hooper
  • Corey Worthington
  • Derek Woodroffe
  • Dalus
  • Dan Strother
  • Daniel Davis
  • Daniel Uhrenholt
  • datasheetarchive
  • Dave Billington
  • Dave Marshall
  • David F.
  • Dennis Rogers
  • drelectrix
  • Dr. John Gudenas
  • Dr. Spark
  • E.TexasTesla
  • eastvoltresearch
  • Eirik Taylor
  • Erik Dyakov
  • Erlend^SE
  • Finn Hammer
  • Firebug24k
  • GalliumMan
  • Gary Peterson
  • George Slade
  • GhostNull
  • Gordon Mcknight
  • Graham Armitage
  • Grant
  • GreySoul
  • Henry H
  • IamSmooth
  • In memory of Leo Powning
  • Jacob Cash
  • James Howells
  • James Pawson
  • Jeff Greenfield
  • Jeff Thomas
  • Jesse Frost
  • Jim Mitchell
  • jlr134
  • Joe Mastroianni
  • John Forcina
  • John Oberg
  • John Willcutt
  • Jon Newcomb
  • klugesmith
  • Leslie Wright
  • Lutz Hoffman
  • Mads Barnkob
  • Martin King
  • Mats Karlsson
  • Matt Gibson
  • Matthew Guidry
  • mbd
  • Michael D'Angelo
  • Mikkel
  • mileswaldron
  • mister_rf
  • Neil Foster
  • Nick de Smith
  • Nick Soroka
  • nicklenorp
  • Nik
  • Norman Stanley
  • Patrick Coleman
  • Paul Brodie
  • Paul Jordan
  • Paul Montgomery
  • Ped
  • Peter Krogen
  • Peter Terren
  • PhilGood
  • Richard Feldman
  • Robert Bush
  • Royce Bailey
  • Scott Fusare
  • Scott Newman
  • smiffy
  • Stella
  • Steven Busic
  • Steve Conner
  • Steve Jones
  • Steve Ward
  • Sulaiman
  • Thomas Coyle
  • Thomas A. Wallace
  • Thomas W
  • Timo
  • Torch
  • Ulf Jonsson
  • vasil
  • Vaxian
  • vladi mazzilli
  • wastehl
  • Weston
  • William Kim
  • William N.
  • William Stehl
  • Wesley Venis
The aforementioned have contributed financially to the continuing triumph of 4hv.org. They are deserving of my most heartfelt thanks.
Forums
4hv.org :: Forums :: Computer Science
« Previous topic | Next topic »   

Someone is connected to my wireless network

1 2 
Move Thread LAN_403
scrooch
Tue Nov 30 2010, 07:04AM Print
scrooch Registered Member #908 Joined: Wed Jul 18 2007, 05:53AM
Location:
Posts: 49
Ok so i was going through the DHCP client list in my router webpage, and there was this computer that does not belong to us.
It says

192.168.169.2	LeeChehWei-PC	00:1d:e0:80:cd:b1

Now i also checked the IP pool that the router is using.

192.168.169.2 is not in that pool as it only goes from 192.168.2.2 to 192.168.2.100


what is this machine?
How did it manage to connect?
Back to top
Pinky's Brain
Tue Nov 30 2010, 10:36AM
Pinky's Brain Registered Member #2901 Joined: Thu Jun 03 2010, 01:25PM
Location:
Posts: 837
Maybe it allows addresses outside of the pool if specifically requested or something.

What kind of security are you using?
Back to top
Adam Munich
Tue Nov 30 2010, 11:45AM
Adam Munich Registered Member #2893 Joined: Tue Jun 01 2010, 09:25PM
Location: Cali-forn. i. a.
Posts: 2242
Possibly just a person enjoying an open wifi network, --a rare thing nowadays.

I say share the love, it's not like you get charged by the megabyte.
Back to top
Thomas W
Tue Nov 30 2010, 03:43PM
Thomas W Registered Member #3324 Joined: Sun Oct 17 2010, 06:57PM
Location:
Posts: 1276
id put a watch on what there doing on your network they could be donwloading illigel stuff ect :S
Back to top
Steve Conner
Tue Nov 30 2010, 05:19PM
Steve Conner Registered Member #30 Joined: Fri Feb 03 2006, 10:52AM
Location: Glasgow, Scotland
Posts: 6706
Maybe they're connected to the WAN side of it.

It's either some guy at the ISP administering your router, or a really leet hacker.
Back to top
Nicko
Tue Nov 30 2010, 05:58PM
Nicko Registered Member #1334 Joined: Tue Feb 19 2008, 04:37PM
Location: Nr. London, UK
Posts: 615
[quote]
Ok so i was going through the DHCP client list in my router webpage, and there was this computer that does not belong to us.
It says

192.168.169.2	LeeChehWei-PC	00:1d:e0:80:cd:b1

Now i also checked the IP pool that the router is using.

192.168.169.2 is not in that pool as it only goes from 192.168.2.2 to 192.168.2.100


what is this machine?
How did it manage to connect?
[/quote1291139448]

Are you encrypting your access point? If not, you should be.

The guy has connected with a class B address - this is possible with some routers, even if their own DHCP pool is a different class altogether - if he intruder sets a static IP and gets lucky, then its your problem. Anything under 192.168.*.* is for "local" use - some routers allow anything in that class B range by default.

If this is a domestic setup, make sure everything is in a specific class C range, in your case 192.168.2.* - the mask needed is then 255.255.255.0 - this should be on every bit of kit on the internal side of your network.

You need to up your encryption - if you already have it encrypted, change the key and up the length, then reset the key in all your clients.

What router do you have?

In my last job, we had a similar thing which turned out to be the night security guard bringing in a laptop to watch dodgy movies - he just looked for a spare CAT5e point and plugged in - I made all ports lock to a specific MAC address after that and set up alarms & honey pots to trap further attempts...

Cheers
Back to top
TechMojo
Tue Nov 30 2010, 08:59PM
TechMojo Registered Member #3465 Joined: Tue Nov 30 2010, 08:51PM
Location:
Posts: 1
Don't miss a great opportunity, fire up a sniffer like Snort. Filter the traffic to that IP and see what he is up to! He could be doing something illegal through your public IP!
Back to top
Adam Munich
Wed Dec 01 2010, 01:13AM
Adam Munich Registered Member #2893 Joined: Tue Jun 01 2010, 09:25PM
Location: Cali-forn. i. a.
Posts: 2242
Or it could just be a child enjoying the internet on his PSP...
Back to top
scrooch
Wed Dec 01 2010, 01:56AM
scrooch Registered Member #908 Joined: Wed Jul 18 2007, 05:53AM
Location:
Posts: 49
thanks for the responses guys. I think ill just kick him by changing the password and maybe ban his mac address.

still beats me how he managed to get a ip address out side of the pool.

my router is a belkin "share" router
Back to top
Conundrum
Wed Dec 01 2010, 04:25PM
Conundrum Registered Member #96 Joined: Thu Feb 09 2006, 05:37PM
Location: CI, Earth
Posts: 4059
heh.
sounds like someone around might be using a cantenna.
i agree it probably isn't a good idea to leave the wireless unlocked, in case someone is using it to send spam/download dodgy stuff/etc.
For security reasons I recommend getting a printout of the mac address and times connected etc in case this gets ugly.

-A
Back to top
1 2 

Moderator(s): Chris Russell, Noelle, Alex, Tesladownunder, Dave Marshall, Dave Billington, Bjørn, Steve Conner, Wolfram, Kizmo, Mads Barnkob

Go to:

Powered by e107 Forum System
 
Legal Information
This site is powered by e107, which is released under the GNU GPL License. All work on this site, except where otherwise noted, is licensed under a Creative Commons Attribution-ShareAlike 2.5 License. By submitting any information to this site, you agree that anything submitted will be so licensed. Please read our Disclaimer and Policies page for information on your rights and responsibilities regarding this site.