Advertisement

There's no such thing as a stupid question, but they're the easiest to answer.
Login
Search

Advertisement

Networking Networking
Search Search
Search for:
Tech Support Guy > > >

Solved: There are unknown IP & Mac Addresses on my network, HELP!


(!)

ladex142's Avatar
ladex142 ladex142 is offline
Member with 143 posts.
THREAD STARTER
 
Join Date: Jun 2006
22-Mar-2011, 04:30 PM #1
Solved: There are unknown IP & Mac Addresses on my network, HELP!
Hello everybody!

I have various unknow Mac addresses on my network, I need help detecting if they are normal/non harmful OR if I've been hacked! I've uploaded a picture of the addresses, the second to the last address is my router's.
Attached Thumbnails
Solved: There are unknown IP & Mac Addresses on my network, HELP!-4.png  
smittygeek4273's Avatar
smittygeek4273 smittygeek4273 is offline
smittygeek4273 has a Photo Album
Computer Specs
Account Disabled with 91 posts.
 
Join Date: Mar 2011
Location: Earth
Experience: Everything but Vista & 7
22-Mar-2011, 05:35 PM #2
is there a wifi module in your router? if so is it encrypted?
smittygeek4273's Avatar
smittygeek4273 smittygeek4273 is offline
smittygeek4273 has a Photo Album
Computer Specs
Account Disabled with 91 posts.
 
Join Date: Mar 2011
Location: Earth
Experience: Everything but Vista & 7
22-Mar-2011, 05:42 PM #3
packet trap
download packet trap from cnet to test thier status and figure out their location
etaf's Avatar
etaf   (Wayne) etaf is offline
Computer Specs
Moderator with 52,949 posts.
 
Join Date: Oct 2003
Location: Surrey, UK
22-Mar-2011, 06:18 PM #4
can we have some details of the network and what you have connected - make and models may help

this program will go out a report back all IPs and Mac on the network


------------------------------------------------------------------------
Find all devices on the network

Free Network Scanner Software
It will detect all network devices in your network with it's IP and MAC Addresses.
http://www.radmin.com/products/ipscanner/

------------------------------------------------------------------------
__________________
Wayne
Please let us know what the final solution was to any problem posted
ladex142's Avatar
ladex142 ladex142 is offline
Member with 143 posts.
THREAD STARTER
 
Join Date: Jun 2006
22-Mar-2011, 08:37 PM #5
I downloaded the packet trap and didn't know how to get anything out of it, lol......It's just a home wireless router with 3 laptops connected at most, and I know their IP & MAC addresses. I've been experiencing strange happenings with my connection lately, like getting kicked out of connection to the internet, which I had to reset the router to get that fixed after trying everything that I could! I downloaded Zamzom wireless network tool and I discovered various connections that I don't know of.....
TerryNet's Avatar
Computer Specs
Moderator with 66,897 posts.
 
Join Date: Mar 2005
Location: Ottawa, IL
22-Mar-2011, 08:40 PM #6
Is your network secured (WPA or WPA2 encryption)? It should be.

What did the radmin program show?
ladex142's Avatar
ladex142 ladex142 is offline
Member with 143 posts.
THREAD STARTER
 
Join Date: Jun 2006
22-Mar-2011, 08:46 PM #7
Quote:
Originally Posted by etaf View Post
can we have some details of the network and what you have connected - make and models may help

this program will go out a report back all IPs and Mac on the network


------------------------------------------------------------------------
Find all devices on the network

Free Network Scanner Software
It will detect all network devices in your network with it's IP and MAC Addresses.
http://www.radmin.com/products/ipscanner/

------------------------------------------------------------------------
IPscanner has not discover the IPs that was discovered by Zamzom tool (which does the same thing as IPscanner), I'll keep scanning to see if something shows up.

Last edited by ladex142; 23-Mar-2011 at 08:15 AM..
ladex142's Avatar
ladex142 ladex142 is offline
Member with 143 posts.
THREAD STARTER
 
Join Date: Jun 2006
22-Mar-2011, 08:48 PM #8
Quote:
Originally Posted by TerryNet View Post
Is your network secured (WPA or WPA2 encryption)? It should be.

What did the radmin program show?
My router only supports up to WPA, which I'm using at the moment. Would you recommend that I get a new router that supports WPA2?
sludge3000's Avatar
sludge3000 sludge3000 is offline
Member with 342 posts.
 
Join Date: Oct 2008
Location: York, UK
Experience: Intermediate
23-Mar-2011, 01:56 AM #9
Have you checked the IP address and MAC of your Router?
192.168.1.1 - Most likely routers IP address assuming it is using 192.168.1.0 network.
192.168.1.255 - Broadcast address for your home network assuming home network is 192.168.1.0.

224.0.0.22 + 224.0.0.252 - Multicast addresses used by IGMP and LLMNR respectively as explained > http://en.wikipedia.org/wiki/Multicast_address

239.255.255.250 - Multicast address used by SSDP > http://en.wikipedia.org/wiki/Simple_...overy_Protocol

Can I ask what application highlighted these addresses to you? If it was a network scanner I would expect the IP's of your other computers to be on there as well. A screen shot of the full window would be good as the one you provided has cut off the title of the window.
rodcarty's Avatar
rodcarty rodcarty is offline rodcarty has a Profile Picture
Computer Specs
Member with 121 posts.
 
Join Date: Mar 2011
Location: Whitehorse, Yukon, Canada
Experience: Advanced
23-Mar-2011, 03:33 AM #10
I think those IP addresses and MACs that look foreign are IPv6 numbers.
http://www.coffer.com/mac_find/?string=01%3A00%3A5e
If that's a Linksys or similar router (Linksys typically will use the IP address you show) you can get a DHCP client list from it and that's what you should be concerned about as far as other computers sharing your Internet connection.
ladex142's Avatar
ladex142 ladex142 is offline
Member with 143 posts.
THREAD STARTER
 
Join Date: Jun 2006
23-Mar-2011, 06:18 AM #11
Quote:
Originally Posted by sludge3000 View Post
Have you checked the IP address and MAC of your Router?
192.168.1.1 - Most likely routers IP address assuming it is using 192.168.1.0 network.
192.168.1.255 - Broadcast address for your home network assuming home network is 192.168.1.0.

224.0.0.22 + 224.0.0.252 - Multicast addresses used by IGMP and LLMNR respectively as explained > http://en.wikipedia.org/wiki/Multicast_address

239.255.255.250 - Multicast address used by SSDP > http://en.wikipedia.org/wiki/Simple_...overy_Protocol

Can I ask what application highlighted these addresses to you? If it was a network scanner I would expect the IP's of your other computers to be on there as well. A screen shot of the full window would be good as the one you provided has cut off the title of the window.
192.168.1.1 - Yes, it's my router's IP
If the others are not harmful, then it leaves only this IP & MAC unexplained 192.168.1.255 FF-FF-FF-FF-FF-FF
I used Zamzom Wireless Network Tool
sludge3000's Avatar
sludge3000 sludge3000 is offline
Member with 342 posts.
 
Join Date: Oct 2008
Location: York, UK
Experience: Intermediate
23-Mar-2011, 06:35 AM #12
192.168.1.255 FF-FF-FF-FF-FF-FF

As I said in my post, this is the broadcast address for your home network.
Brief explanation:
Your home network is 192.168.1.0/24 (subnet mask is 255.255.255.0). This means that there are 256 IP addresses available to your home network (192.168.1.0 - 168.168.1.255) however two of these addresses are unusable. 192.168.1.0 is the network number and so cannot be assigned to an individual machine. 192.168.1.255 is the broadcast address for your network which means that any information sent to this address will be received by every computer on the network, and so it also cannot be assigned to an individual machine.

Hope this clears things up and don't forgot to mark this thread as solved if you have no further questions.
ladex142's Avatar
ladex142 ladex142 is offline
Member with 143 posts.
THREAD STARTER
 
Join Date: Jun 2006
23-Mar-2011, 06:40 AM #13
Quote:
Originally Posted by sludge3000 View Post
192.168.1.255 FF-FF-FF-FF-FF-FF

As I said in my post, this is the broadcast address for your home network.
Brief explanation:
Your home network is 192.168.1.0/24 (subnet mask is 255.255.255.0). This means that there are 256 IP addresses available to your home network (192.168.1.0 - 168.168.1.255) however two of these addresses are unusable. 192.168.1.0 is the network number and so cannot be assigned to an individual machine. 192.168.1.255 is the broadcast address for your network which means that any information sent to this address will be received by every computer on the network, and so it also cannot be assigned to an individual machine.

Hope this clears things up and don't forgot to mark this thread as solved if you have no further questions.

Thanks for clearing things up, but I have one last question. Can you please explain why I keep seeing these two router network, Norton Network Map also keeps showing them......I use a netgear router
Attached Thumbnails
Solved: There are unknown IP & Mac Addresses on my network, HELP!-5.png  
TerryNet's Avatar
Computer Specs
Moderator with 66,897 posts.
 
Join Date: Mar 2005
Location: Ottawa, IL
23-Mar-2011, 08:03 AM #14
WPA (with a strong passphrase) has never been cracked, so there is no need to upgrade to use WPA2.

I've tried that Advanced IP Scanner etaf recommended, and it seems to be pretty fast and accurate.

I'm guessing those two routers that show on your post # 13 attachment are routers whose wireless networks you can detect. Unless and until you connect to them they are not on your network. Sometimes in my (Windows 7) Network folder I see a router that is supposedly on my network; but it can't be--its signal is too weak for a connection and I do not know the encryption key.
__________________
Microsoft MVP - Windows Expert - Consumer (since July 2010)
ladex142's Avatar
ladex142 ladex142 is offline
Member with 143 posts.
THREAD STARTER
 
Join Date: Jun 2006
23-Mar-2011, 08:13 AM #15
Okay, I think I can stop worrying now, thanks guys for the help!
As Seen On

BBC, Reader's Digest, PC Magazine, Today Show, Money Magazine
WELCOME TO TECH SUPPORT GUY!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.


(clock)
THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools


WELCOME
You Are Using: Server ID
Trusted Website Back to the Top ↑