 axelroseShelters saves Babies USA
join:2005-05-25
Chattanooga, TN
 ·Comcast
| [Connectivity] Neighbor using MY router to connect to Internet? I have a D-link 614+ Router. It's pretty old. I suspect someone or something is connecting to my router without my permission.
What is a good way or method to "detect" if this is happening to my router ?
I've tried using IPCONFIG /ALL but all I see are my ip addy, dns addy's and nothing that looks unusal. Is there something in IPCONFIG/ ALL that I should be looking for?
What about WIRESHARK? I have ran it a few minutes but don't really know what should or shouldn't be in those logs.
And what is the term or phrase used to describe when someone is using your wireless router without your permission?
Thanks a bunch 
If this is not the appropriate forum then please place it to the correct forum for me and I apologize
--
I have been very charitable while poor and kind to people even while undergoing enormous personal pain.
My only weakness is that I at times have placed trust in deceitful people.
I know that GOD will be my ONLY judge in this life or the next. |
|
 JimThePCGuyFormerly known as schja01.Premium,MVM
join:2000-04-27
Morton Grove, IL | Re: [Connectivity] Neighbor using MY router to connect to Intern Point your web browser at the router's web interface and check the log (if it has one) or the DHCP table. Look for IP addresses you can't account for.
Better yet, lock down the wireless side of the router.
At the very least, turn on encryption (WEP/WPA/etc.).
MAC filtering is a good option.
Then after everything is all working turn off SSID broadcasting.
Short of a hacker attack that should prevent casual use of your Wi-Fi. |
|
|
|
 pflogBueller? Bueller?Premium,MVM
join:2001-09-01
El Dorado Hills, CA
kudos:3 | reply to axelrose
Do you have it setup currently to open (e.g. no encryption)?
It looks like that router only supports WEP, but newer revisons/firmware MIGHT support WPA-PSK. You should probably ask in the wireless forum how to get things setup for WPA-PSK or at the very least WEP.
WEP is easily bypassed, even with MAC filtering and no SSID broadcast, but JimThePCGuy  is correct that it will keep a casual user off your network.
If, after changing to WEP, your neighbor continues to use your connection (read: they "hack" your WEP key), then I would find the culprit and tell them nicely to get their own internet connection or you will pursue legal action.
The easiest way to ensure you are not getting anyone piggybacking is to upgrade to a WPA2-capable router (there are plenty out there for <= $70) and use WPA2.
--
He who is not contented with what he has, would not be contented with what he would like to have. -Socrates |
|
axelroseShelters saves Babies USA
join:2005-05-25
Chattanooga, TN Reviews:
·Comcast
| reply to JimThePCGuy
said by JimThePCGuy:Point your web browser at the router's web interface and check the log (if it has one) or the DHCP table. Look for IP addresses you can't account for. Better yet, lock down the wireless side of the router. At the very least, turn on encryption (WEP/WPA/etc.). MAC filtering is a good option. Then after everything is all working turn off SSID broadcasting. Short of a hacker attack that should prevent casual use of your Wi-Fi. I am using WEP encryption with a Key and I 'believe' I am filtering the MAC address.
So, other than looking at the Router's Log is there another way to actively see who is/isn't on my network?
Also, When I turn on "dropped packets" logging I get an insane number of attempts..I'm talking a dozen per 5 minutes period... Does this 'dropped packets' log mean anything at all?
thanks
--
I have been very charitable while poor and kind to people even while undergoing enormous personal pain.
My only weakness is that I at times have placed trust in deceitful people.
I know that GOD will be my ONLY judge in this life or the next. |
|
pflogBueller? Bueller?Premium,MVM
join:2001-09-01
El Dorado Hills, CA
kudos:3 | Change your WEP key and see if the traffic stops. Although if it IS an intruder, they will just crack your WEP key again.
As suggested, look at the DHCP lease table and then cross-reference that with your known LAN/WLAN clients.
--
He who is not contented with what he has, would not be contented with what he would like to have. -Socrates |
|
 dadkinsCan you do Blu?Premium,MVM
join:2003-09-26
Hercules, CA
kudos:18
1 edit | reply to axelrose
D-Link DI624 here.
Look for the DHCP list(see pic).
I currently only have two machines accessing the router.
If you see more than what should be there... someone else is using your connection.
Also, limit the IP pool to only the amount of machines *YOU* use.
Turning off SSID... don't bother.
--
Think outside the Fox... Opera |
|
axelroseShelters saves Babies USA
join:2005-05-25
Chattanooga, TN Reviews:
·Comcast
| reply to pflog
said by pflog:Change your WEP key and see if the traffic stops. Although if it IS an intruder, they will just crack your WEP key again. As suggested, look at the DHCP lease table and then cross-reference that with your known LAN/WLAN clients. Is the "DHCP lease table" the same as my "Static DHCP Client List" ?
If not then how do I read/find my DHCP lease table listings?
--
I have been very charitable while poor and kind to people even while undergoing enormous personal pain.
My only weakness is that I at times have placed trust in deceitful people.
I know that GOD will be my ONLY judge in this life or the next. |
|
pflogBueller? Bueller?Premium,MVM
join:2001-09-01
El Dorado Hills, CA
kudos:3 | I am not familiar with that router. It is probably under the "administration" tab (or similar). No, it's probably not the "static DHCP client list" - that sounds like the list of DHCP leases you can setup in your router to hand out the same IP address to the same MAC address each time.
You might need to ask in the D-Link forum here how to find this for your router, if you can't locate it.
--
He who is not contented with what he has, would not be contented with what he would like to have. -Socrates |
|
axelroseShelters saves Babies USA
join:2005-05-25
Chattanooga, TN Reviews:
·Comcast
| reply to dadkins
said by dadkins:D-Link DI624 here. Look for the DHCP list(see pic). I currently only have two machines accessing the router. If you see more than what should be there... someone else is using your connection. Also, limit the IP pool to only the amount of machines *YOU* use. Turning off SSID... don't bother. It seems I have the same setup as you do?
--
I have been very charitable while poor and kind to people even while undergoing enormous personal pain.
My only weakness is that I at times have placed trust in deceitful people.
I know that GOD will be my ONLY judge in this life or the next. |
|
dadkinsCan you do Blu?Premium,MVM
join:2003-09-26
Hercules, CA
kudos:18 | Yes! At, the top there, lower the Ending IP Address to 102 or 101.
See at the bottom? Are those both you? If yes, no one is hitting your connection. 
--
Think outside the Fox... Opera |
|
 tshirtPremium,MVM
join:2004-07-11
Snohomish, WA
kudos:3
·Comcast
| reply to axelrose
Like dadkins you should limit the IP address range to just 2 devices (or however many you have)
Even better would be to use static addresses only, linked to the specific MAC of each.
Best of all would be to go wired and turn off the radio all together (if this would work for you) |
|
axelroseShelters saves Babies USA
join:2005-05-25
Chattanooga, TN Reviews:
·Comcast
| reply to dadkins
said by dadkins:Yes! At, the top there, lower the Ending IP Address to 102 or 101. See at the bottom? Are those both you? If yes, no one is hitting your connection. YES those are the only 2 that should be there.
Thanks Dad..
--
I have been very charitable while poor and kind to people even while undergoing enormous personal pain.
My only weakness is that I at times have placed trust in deceitful people.
I know that GOD will be my ONLY judge in this life or the next. |
|
dadkinsCan you do Blu?Premium,MVM
join:2003-09-26
Hercules, CA
kudos:18
1 edit | Cool!
If you are using Static IPs for the machines, Disable DHCP Server at top and click Apply.
--
Think outside the Fox... Opera |
|
 sortofageekNot TroublePremium,Mod
join:2001-08-19
There & Then
kudos:13
Comcast HSI
Comcast Cable TV
Team Helix
Distributed Comput..
Linksys
| reply to axelrose
While this is really not a Comcast issue, you seem to be getting good help here from the faithful regulars.
Up to you, but I can move it to »Wireless Security if you wish. If you do, please IM me to let me know.
--
Join Team Helix * I am praying for these friends . |
|
pflogBueller? Bueller?Premium,MVM
join:2001-09-01
El Dorado Hills, CA
kudos:3 | Looks like he doesn't have any intruders So the topic is probably closed anyway. |
|
sortofageekNot TroublePremium,Mod
join:2001-08-19
There & Then
kudos:13 | Thanks, as usual, to the smart, helpful, people who frequent this forum. |
|
sortofageekNot TroublePremium,Mod
join:2001-08-19
There & Then
kudos:13 | reply to axelrose
(topic move) Why hide a MAC?Moderator Action
The post that was here, has been moved to a new topic .. »Why hide a MAC? |
|
| reply to axelrose
Re: [Connectivity] Neighbor using MY router to connect to Intern how about turing QoS on, and setting it to very low for any IP you dont list as "acceptable".
Then just change the router password so the changes cant be messed with.
That is what I would do on top of Security. Then that way, they get 1kb/s DL, they go somewhere else |
|
| reply to dadkins
If the thought is that someone broke your WEP key and hacked into your wireless network why would you think this "hacker" would use dhcp? They could use a static IP and may be on his network right now. Just because there is no entry in the DHCP table doesn't mean no one else is there. |
|
dadkinsCan you do Blu?Premium,MVM
join:2003-09-26
Hercules, CA
kudos:18
1 edit | The router will list all machines connected to it.
Someone would(in theory) have to either have some serious wattage to knock his wireless off line or actually be closer to the router to knock him off.
If the DHCP server is disabled, the router will not assign a IP for the "hacker" to connect.
One more layer they will have to deal with, right?
Since OP sees his MACs and computer names, and no one elses, odds are no one else is hitting his server.
Look again at my image above, I have three computers connected, but since one has not accessed the router since last lease... it doesn't show.
If I were to wake it back up and open a web page... it would get listed.
--
Think outside the Fox... Opera |
|
