Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Unknown computer


  • Please log in to reply
13 replies to this topic

#1 r8er

r8er

  • Members
  • 36 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Reno, NV
  • Local time:01:34 PM

Posted 23 March 2017 - 09:18 PM

I just noticed a unfamiliar access to my router, it is listed as a wired connection but there is only 2 things physically connected to my router.

See here for my network:

https://www.bleepingcomputer.com/forums/t/640269/not-sure-how-to-connect/#entry4184009

the Netgear router is only plugged into the ASUS and the NVR so not know what this is

 

192.168.1.60 68:A3:C4:78:0D:CC DESKTOP-VEP624T

 

Anyone can help is my network being hacked?

All settings are like described in other thread



BC AdBot (Login to Remove)

 


#2 Kilroy

Kilroy

  • BC Advisor
  • 3,442 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Launderdale, MN
  • Local time:03:34 PM

Posted 24 March 2017 - 11:41 AM

According to the MAC address it is a Liteon Technology Corporation device.  Does that help at all?



#3 Wand3r3r

Wand3r3r

  • Members
  • 2,027 posts
  • OFFLINE
  •  
  • Local time:01:34 PM

Posted 27 March 2017 - 06:06 PM

Simple test: block that mac address and see what fails to connect

 

So you have no pcs wired into your network?


Edited by Wand3r3r, 27 March 2017 - 06:10 PM.


#4 britechguy

britechguy

    Been there, done that, got the T-shirt


  • Moderator
  • 8,976 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Staunton, VA
  • Local time:04:34 PM

Posted 27 March 2017 - 06:56 PM

According to the MAC address it is a Liteon Technology Corporation device.  Does that help at all?

 

How are you determining this?  When I click on your link and it does the search I'm getting zero results.

 

Thanks for this website, though.  It can come in handy in just this sort of situation but I can't get it to turn up the LiteON result.


Brian  AKA  Bri the Tech Guy (website in my user profile) - Windows 10 Home, 64-Bit, Version 1803, Build 17134 

     . . . the presumption of innocence, while essential in the legal realm, does not mean the elimination of common sense outside it.  The willing suspension of disbelief has its limits, or should.

    ~ Ruth Marcus,  November 10, 2017, in Washington Post article, Bannon is right: It’s no coincidence The Post broke the Moore story


 

 

 

              

 


#5 Wand3r3r

Wand3r3r

  • Members
  • 2,027 posts
  • OFFLINE
  •  
  • Local time:01:34 PM

Posted 27 March 2017 - 11:24 PM

I used a different web site as a cross check and it confirmed Liteon.

 

I have seen these questions before and its always a local device or an unsolved mystery.


Edited by Wand3r3r, 27 March 2017 - 11:37 PM.


#6 Kilroy

Kilroy

  • BC Advisor
  • 3,442 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Launderdale, MN
  • Local time:03:34 PM

Posted 28 March 2017 - 10:34 AM

Another site to look up MAC addresses.  The first site much have changed something, because I now get 0 results also.



#7 Wand3r3r

Wand3r3r

  • Members
  • 2,027 posts
  • OFFLINE
  •  
  • Local time:01:34 PM

Posted 28 March 2017 - 12:07 PM

http://www.adminsub.net/mac-address-finder/liteon

 

look at the 21st entry



#8 toofarnorth

toofarnorth

  • Members
  • 391 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:34 PM

Posted 29 March 2017 - 10:46 AM

Liteon is most likely the OEM making the motherboard, so basically it could be any manufacturer buying from them.

The name of the computer suggests it is a Windows 10 computer

 

tfn



#9 r8er

r8er
  • Topic Starter

  • Members
  • 36 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Reno, NV
  • Local time:01:34 PM

Posted 07 April 2017 - 12:18 AM

Ok sorry taken awhile but still working on try to learn this stuff(man start to look something up and that ref you to something else and again and again, next thing you know 50 tabs open and forgot what you started to search for...WELCOME TO THE INTERNET!!!!LOL) Anyways that first unknown turned out to be my wife's new HP PC which is connected wireless to the ASUS so not sure why it showed as being wired. BUTT here is a really weird thing, we let my brother in law move into the front bedroom and he connects to ASUS wireless(tried put him on the Guest Network but it connect then few minutes later lose connect so allowed him on main channel ASUS. but when do a check of connections and he has PC on this shows up at the same time as him-

 

"tvbac1a6ba2059   
192.168.1.40    
2.4 G
C0:38:96:1B:7D:2A"

 

Did some searching and some how found some connection to this IP

"91.121.215.197" in France

And my ASUS gives different connections different icons and this came up under something called "Red Hat Linux Device"

 

Brother-in-law shows as-

"DESKTOP-9FGPAS6   
192.168.1.59    
5 G-2
00:1E:64:D7:37:41"

And when brother powers down so goes away both connections

ASUS gives me the option to restrict internet connection to my choice, so did to it and brother still had net and connection stayed till he powered down then gone.then returned next day when he powered up his PC.

So as you can imagine this has me VERY uneasy and makes me not want to allow him internet access(for my protection) which to be totally forthcoming is beginning generate turmoil between the wife and I over her brother(but that's a story for anther time...LOL)  



#10 Wand3r3r

Wand3r3r

  • Members
  • 2,027 posts
  • OFFLINE
  •  
  • Local time:01:34 PM

Posted 07 April 2017 - 08:55 AM

looks like he is connecting via 2.4G and 5G wifi to the same router.

 

exactly how did you try to setup a restriction?



#11 r8er

r8er
  • Topic Starter

  • Members
  • 36 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Reno, NV
  • Local time:01:34 PM

Posted 07 April 2017 - 09:44 PM

Thru ASUS router settings



#12 Wand3r3r

Wand3r3r

  • Members
  • 2,027 posts
  • OFFLINE
  •  
  • Local time:01:34 PM

Posted 08 April 2017 - 11:17 AM

I was asking for specific settings not a general overview.  Clearly something was not configured correctly .

 

For example did you set a schedule for the restriction?

How did you set the mac address/ip address in the restriction?

Did you enable/make active the restriction?



#13 r8er

r8er
  • Topic Starter

  • Members
  • 36 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Reno, NV
  • Local time:01:34 PM

Posted 10 April 2017 - 04:44 AM

here is how I do it

Attached File  example.png   149.05KB   0 downloads

 

what this mean? It keeps appearing in my connection logs about every 3 seconds when he is online and he complain about constant reconnecting  

Apr 10 01:49:40 kernel: nf_ct_sip: dropping packetIN= OUT=br0 SRC=77.180.118.53 DST=192.168.1.59 LEN=184 TOS=0x00 PREC=0x00 TTL=45 ID=28507 DF PROTO=TCP SPT=5060 DPT=60132 SEQ=3986230526 ACK=3900432917 WINDOW=453 RES=0x00 ACK PSH FIN URGP=0 OPT (0101080A034479A001444DE7)



#14 Wand3r3r

Wand3r3r

  • Members
  • 2,027 posts
  • OFFLINE
  •  
  • Local time:01:34 PM

Posted 10 April 2017 - 09:57 AM

You need to schedule it which can be 24hrs or a set schedule of access [example: 8 to 5 off 5 to 8 on]






1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users