Belkin router... An unfamiliar address

You know what they say......"You get what you pay for".............. Sad, but usually true............ :-(

RayFinkle said:

simono1, are you saying that your router still shows that MAC address/host as connected?

There's NO WAY a hacker could have connected to your wireless router that fast if you're really are running WPA2!!

Does your router have any times related to that host?

One option you have is MAC address filtering. By now you know the MAC addresses of your 2 PCs. You can set up your router to ONLY allow those 2 MAC addresses to connect and then you are set.

The only caveat is MAC address spoofing. But, let's take this one step at a time.

All I can see is 3 addresses in the DHCP client list. One is that unfamiliar one. I thought about filtering but thought sense the wireless is now turned off... why? but I will if you think I should.

I refreshed it several times now and it stays there.

Do you think that when I set-up the wireless connection back when only my computer had a wireless card, and we couldn't with the other, it is in my system and when I logon.... it is just showing that?

Doing a google on that i/p shows that it looks like a router based ip. Did you get the router second hand? If so there may have been a static route setup. I use Belkin like Kari and I have found that if I get something snarling up, it is sometimes best to reset the router completely to factory defaults and start over again...after making sure to write down the appropriate settings!!

simono1 said:

RayFinkle said:

simono1, are you saying that your router still shows that MAC address/host as connected?

There's NO WAY a hacker could have connected to your wireless router that fast if you're really are running WPA2!!

Does your router have any times related to that host?

One option you have is MAC address filtering. By now you know the MAC addresses of your 2 PCs. You can set up your router to ONLY allow those 2 MAC addresses to connect and then you are set.

The only caveat is MAC address spoofing. But, let's take this one step at a time.

All I can see is 3 addresses in the DHCP client list. One is that unfamiliar one. I thought about filtering but thought sense the wireless is now turned off... why? but I will if you think I should.

I refreshed it several times now and it stays there.

That address will stay there until the DHCP lease runs out. This could be one day to several weeks, depending how DHCP leasing is set up. It would only be anomalous at this point if it is staying there beyond one lease period after you shut off wireless.

Is anyone running a Virtual Machine on the network?

wilywombat said:

Doing a google on that i/p shows that it looks like a router based ip. Did you get the router second hand? If so there may have been a static route setup. I use Belkin like Kari and I have found that if I get something snarling up, it is sometimes best to reset the router completely to factory defaults and start over again...after making sure to write down the appropriate settings!!

This router was straight out of the box.... and I have had it for 2 or so years. At one time... I don't know... maybe a year ago, I must of created a static address because there is one there. I seen it as I was looking around for a way to get-rid of that unfamiliar address. I should of probably said something earlier.... Maybe I should start over, but we had a hard time setting it up the first time for whatever reason, and was on the phone about it forever, and it worries me to attempt it. I do have considerably more knowledge about things now, but I don't want to open that can of worms if I don't have too. There is another computer involved here. If you feel that it is in my best interest to proceed.... I will. Just wanted to lay it out for ya so you know where I'm at with it.

FliGi7 said:

simono1 said:

RayFinkle said:

simono1, are you saying that your router still shows that MAC address/host as connected?

There's NO WAY a hacker could have connected to your wireless router that fast if you're really are running WPA2!!

Does your router have any times related to that host?

One option you have is MAC address filtering. By now you know the MAC addresses of your 2 PCs. You can set up your router to ONLY allow those 2 MAC addresses to connect and then you are set.

The only caveat is MAC address spoofing. But, let's take this one step at a time.

All I can see is 3 addresses in the DHCP client list. One is that unfamiliar one. I thought about filtering but thought sense the wireless is now turned off... why? but I will if you think I should.

I refreshed it several times now and it stays there.

That address will stay there until the DHCP lease runs out. This could be one day to several weeks, depending how DHCP leasing is set up. It would only be anomalous at this point if it is staying there beyond one lease period after you shut off wireless.

Is anyone running a Virtual Machine on the network?

Thank you for the info on that. And I'm sorry.... Yes, I am using virtual on my pc and on a external drive. We have had to for our college lab assignments. Wow... should of probably told you guys that one too. We are running Windows 7 virtually on an external hard drive.

simono1 said:

FliGi7 said:

simono1 said:

All I can see is 3 addresses in the DHCP client list. One is that unfamiliar one. I thought about filtering but thought sense the wireless is now turned off... why? but I will if you think I should.

I refreshed it several times now and it stays there.

That address will stay there until the DHCP lease runs out. This could be one day to several weeks, depending how DHCP leasing is set up. It would only be anomalous at this point if it is staying there beyond one lease period after you shut off wireless.

Is anyone running a Virtual Machine on the network?

Thank you for the info on that. And I'm sorry.... Yes, I am using virtual on my pc and on a external drive. We have had to for our college lab assignments. Wow... should of probably told you guys that one too. We are running Windows 7 virtually on an external hard drive.

And what's the IP, computer name, and MAC of those virtual machines? It could easily be one of those if it's using NAT to acquire an IP. The mac address you listed earlier about the questionable machine is for an HP computer.

I'm on an emachine and the other is HP. We used the service that allows remote access to the computer about 6 months ago. had a problem we couldn't figure out. Maybe that's where it came from....

I have two internal drives... one is running Vista, the other Windows 7. In Vista, I'm running XP virtually whenever I want. And in Windows 7... I'm using XP mode when need be. Do to the fact I have office 2007 only on the vista drive, our labs sometimes call for documentation. A some of the labs are in XP. Rather that jump back-an-forth... I can enter XP on both. I prefer XP mode with 7 but... can't use 2007 there. Anyway, also have windows 7 (virtual) on an external drive. ITT-tech is still using XP and are converting over to 7, but until then, we're using 7 virtually.

I'll have to check the addresses their using, if any but, all the virtual stuff is on the emachine only. How would HP play into it? and I do not see a computer name that we use there... hmmm