Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Possible leecher despite all measures being taken


  • Please log in to reply

#1
Supernoob

Supernoob

    Member

  • Member
  • PipPip
  • 19 posts
On my DHCP client list, I've got a mysterious entry called 'Elvis'. I've checked every possible measure, set up WEP, used MAC address filtering, IP filters, reset my router, even walked around the house with my PSP to sniff out a wireless router.

I'm using a Belkin wireless router, and the DHCP list has elvis at the top highlighted. I can't figure it out.

Jun.24.2006 21:33:35 security:Session -- Prot: 17, 87.74.68.154:50001 > 83.146.21.5:53 97712.157 ~ 98249.672 size 5027/16587 time-out
Jun.24.2006 21:33:42 security:98255.975 Blocked Prot=17, 85.167.106.111:63188 > 87.74.68.154:4166 -Default Defense
Jun.24.2006 21:33:42 security:98255.975 Blocked Prot=17, 85.167.106.111:63188 > 87.74.68.154:4166 -Disallowed Destination IP
Jun.24.2006 21:34:03 security:98277.450 Blocked Prot=6, 87.74.48.178:10188 > 87.74.68.154:139, S Seq=0, Ack=0 -Default Defense
Jun.24.2006 21:34:03 security:98277.450 Blocked Prot=6, 87.74.48.178:10188 > 87.74.68.154:139, S Seq=0, Ack=0 -Disallowed Destination IP
Jun.24.2006 21:34:12 security:98286.326 Blocked Prot=6, 87.74.94.76:16041 > 87.74.68.154:445, S Seq=0, Ack=0 -Default Defense
Jun.24.2006 21:34:12 security:98286.326 Blocked Prot=6, 87.74.94.76:16041 > 87.74.68.154:445, S Seq=0, Ack=0 -Disallowed Destination IP
Jun.24.2006 21:34:25 security:98298.924 Blocked Prot=6, 87.74.114.196:2623 > 87.74.68.154:135, S Seq=16776047, Ack=0 -Default Defense
Jun.24.2006 21:34:25 security:98298.924 Blocked Prot=6, 87.74.114.196:2623 > 87.74.68.154:135, S Seq=16776047, Ack=0 -Disallowed Destination IP
Jun.24.2006 21:34:45 security:98319.517 Blocked Prot=17, 204.16.208.110:44355 > 87.74.68.154:1026 -Default Defense
Jun.24.2006 21:34:45 security:98319.517 Blocked Prot=17, 204.16.208.110:44355 > 87.74.68.154:1026 -Disallowed Destination IP
Jun.24.2006 21:34:45 security:98319.518 Blocked Prot=17, 204.16.208.110:44355 > 87.74.68.154:1027 -Default Defense
Jun.24.2006 21:34:45 security:98319.518 Blocked Prot=17, 204.16.208.110:44355 > 87.74.68.154:1027 -Disallowed Destination IP
Jun.24.2006 21:34:51 security:98325.281 Blocked Prot=17, 87.219.179.151:7204 > 87.74.68.154:11475 -Default Defense
Jun.24.2006 21:34:51 security:98325.281 Blocked Prot=17, 87.219.179.151:7204 > 87.74.68.154:11475 -Disallowed Destination IP




HELP!!!!
  • 0

Advertisements


#2
Neil Jones

Neil Jones

    Member 5k

  • Member
  • PipPipPipPipPipPipPipPip
  • 8,476 posts
Your computer name isn't Elvis is it? :whistling:
(check by right-clicking on My Computer -> Properties -> Computer Name)

Change your SSID to something other than the default, most Belkins use exactly the same name with exactly the same default encryption keys.
  • 0

#3
Supernoob

Supernoob

    Member

  • Topic Starter
  • Member
  • PipPip
  • 19 posts
My computer isn't called Elvis. Neither is my flatmate's. I changed my SSID to 'GetYourOwn'. There's an irony.

The IP adress Pool is set to end at .5, but this guy is .9, with the rest of the numbers being the same. could it be a program I'm using? I haven't had any programs struggle to get online, which is what I would expect, had I blocked it.

Edited by Supernoob, 25 June 2006 - 02:21 PM.

  • 0

#4
Neil Jones

Neil Jones

    Member 5k

  • Member
  • PipPipPipPipPipPipPipPip
  • 8,476 posts
Could be a program or a router that's reporting an erroneous DHCP client when there actually isn't one.

Unplug your computer from the router or disable your wireless card temporarily, then power off and wait and power on the router to clear the DHCP list. Give it a few minutes and then plug in your system/reactivate wireless. Go to your DHCP client list and see if Elvis has nabbed the first entry in the time that your system was disconnected. This will eliminate your computer and everything about it altogether.
  • 0

#5
I love my vans

I love my vans

    Member

  • Member
  • PipPipPip
  • 144 posts
You could just disable the "Broadcast SSID", then the culprit will not know what wireless networks are out there.
  • 0

#6
Supernoob

Supernoob

    Member

  • Topic Starter
  • Member
  • PipPip
  • 19 posts
I reset the router AND powered it down, plus unplugged the cable from the router to the back of my pc. I allowed the PC to register that the router had gone, then reset the machine with the router plugged in and powered up.
Elvis is still there in the DHCP list. Interestingly, 'Russ' (the name of this computer) isn't even listed there now.

Anyone know What the... is going on?
  • 0

#7
dsenette

dsenette

    Je suis Napoléon!

  • Administrator
  • 26,019 posts
  • MVP
does your dhcp list tell you when the lease is set to expire on this elvis machine?
  • 0

#8
Supernoob

Supernoob

    Member

  • Topic Starter
  • Member
  • PipPip
  • 19 posts
Under LAN settings, the 'Lease time' (whatever that is) is set to 'forever'. Can I change that without fear of messing up my system?
  • 0

#9
dsenette

dsenette

    Je suis Napoléon!

  • Administrator
  • 26,019 posts
  • MVP
yeah...you should change that to something between 3 and 8 days....that elvis cat probably got on your network before it was secure...and the dhcp server is holding the lease for it....change that setting...and wait till the lease expiration time..you should see the "the king" leave the building...so to speak
  • 0

#10
Supernoob

Supernoob

    Member

  • Topic Starter
  • Member
  • PipPip
  • 19 posts
I've set it to half hour. Let's see what happens.
  • 0

Advertisements


#11
dsenette

dsenette

    Je suis Napoléon!

  • Administrator
  • 26,019 posts
  • MVP
deffinitely make sure you change that to more than a half an hour once this test is complete
  • 0

#12
Supernoob

Supernoob

    Member

  • Topic Starter
  • Member
  • PipPip
  • 19 posts
Elvis is still there.
  • 0

#13
dsenette

dsenette

    Je suis Napoléon!

  • Administrator
  • 26,019 posts
  • MVP
hmmm....you don't live near graceland do you?....do you know a good priest who does exorcisms?
  • 0

#14
Supernoob

Supernoob

    Member

  • Topic Starter
  • Member
  • PipPip
  • 19 posts
I am absolutely stumped. I've tried everything.
  • 0

#15
dsenette

dsenette

    Je suis Napoléon!

  • Administrator
  • 26,019 posts
  • MVP
would you be up for doing a factory reset on the router and starting over reconfiguring it....or is it not that important to you? (the dhcp lease should have done it...)
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP