Unknown intruder has entered network

Night Shade · 02-25-2009, 10:46 PM

I have a new IP address that has entered my network of computers. I know it is none of my computers because I turned each individual one on, got their IPs, looked at the network devices that were in my network on MacAfee, and confirmed that this new one is not mine. I have it marked down as an intruder, and I want to remove it from my network permanently. Does MacAfee even block it when you mark it as an intruder, or does it just notify you every time that this intruder is connecting to your network? So, bottom line, I need to remove this device from my network permanently and stop it from accessing it ever again.

donfuji · 02-26-2009, 01:04 PM

Are you talking wireless? I have know people to leave their wifi unprotected. If you do this you run the risk of letting anyone in the area access to your network and internet access. There are several things you can do.
1. Encrypt your wireless
2. Allow access by MAC address only. Only approved MAC addresses can get a DHCP lease.
3. Check to make sure you haven't put anything wifi on the network. I have seen the new wifi printers and they can get an IP without much interaction.

Just some thoughts.

Night Shade · 02-26-2009, 06:17 PM

Eh...Not quite.

I'm hooked up to a wired network. All my computers connect through the internet through Ethernet cables. Since it's wired, it's obvious that something, or someone has gotten into my network.

So let me rephrase my question.

How do you permanently remove a device from a wired network?

**djaburg** · 02-26-2009, 09:19 PM

I'd run an application like Look@Lan and determine what it is that's on your network. Are you running a router with a firewall to protect your network? If so, what kind? Some routers give you the ability to do certainly things with IP address within your network.

**johnwill** · 02-27-2009, 08:05 AM

There is no practical way, short of a physical connection, that an intruder can gain access to your wired network.

Perhaps you can show us a screen shot of the issue?

I'd disconnect EVERYTHING but the computer you're using from the router, then post the screen shot of what you think you see as evidence you have an intruder.

To post a screen shot of the active window, hold the Alt key and press the PrtScn key. Open the Windows PAINT application and Paste the screen shot. You can then use PAINT to trim to suit, and save it as a JPG format file. To upload it to TSG, open the full reply window and use the Manage Attachments button to upload it here.

SilverDwn · 05-12-2009, 04:36 AM

Do you use a personal firewall? It is highly reccomended you do on any machine connected to the internet. Most firewalls prevent outside devices from initiating sessions with your PC.

Basenge · 05-12-2009, 09:24 AM

In summary Mr Night shade install Cisco Firewall or Proxy server onto your network to filter out intrudes pop up's and remote access. Setup IP range with specific subnet

02-25-2009, 10:46 PM	#1 (permalink)
Night Shade Registered User Join Date: Feb 2009 Posts: 44 OS: Windows Vista Ultimate Service Pack 1	Unknown intruder has entered network I have a new IP address that has entered my network of computers. I know it is none of my computers because I turned each individual one on, got their IPs, looked at the network devices that were in my network on MacAfee, and confirmed that this new one is not mine. I have it marked down as an intruder, and I want to remove it from my network permanently. Does MacAfee even block it when you mark it as an intruder, or does it just notify you every time that this intruder is connecting to your network? So, bottom line, I need to remove this device from my network permanently and stop it from accessing it ever again.

02-26-2009, 01:04 PM	#2 (permalink)
donfuji Registered User Join Date: Feb 2009 Location: Upstate NY Posts: 36 OS: XP SP3	Re: Unknown intruder has entered network Are you talking wireless? I have know people to leave their wifi unprotected. If you do this you run the risk of letting anyone in the area access to your network and internet access. There are several things you can do. 1. Encrypt your wireless 2. Allow access by MAC address only. Only approved MAC addresses can get a DHCP lease. 3. Check to make sure you haven't put anything wifi on the network. I have seen the new wifi printers and they can get an IP without much interaction. Just some thoughts.

02-26-2009, 06:17 PM	#3 (permalink)
Night Shade Registered User Join Date: Feb 2009 Posts: 44 OS: Windows Vista Ultimate Service Pack 1	Re: Unknown intruder has entered network Eh...Not quite. I'm hooked up to a wired network. All my computers connect through the internet through Ethernet cables. Since it's wired, it's obvious that something, or someone has gotten into my network. So let me rephrase my question. How do you permanently remove a device from a wired network?

02-26-2009, 09:19 PM	#4 (permalink)
djaburg TSF Enthusiast Join Date: May 2008 Posts: 1,326 OS: XP SP3/Vista/7 Server 2K/2K3/2K8	Re: Unknown intruder has entered network I'd run an application like Look@Lan and determine what it is that's on your network. Are you running a router with a firewall to protect your network? If so, what kind? Some routers give you the ability to do certainly things with IP address within your network. __________________ Computers make it easier to do a lot of things, but most of the things they make it easier to do don't need to be done. The inherent vice of capitalism is the uneven division of blessings, while the inherent virtue of socialism is the equal division of misery.

02-27-2009, 08:05 AM	#5 (permalink)
johnwill Manager, Networking Forums Join Date: Sep 2002 Location: S.E. Pennsylvania, US Posts: 41,921 OS: Windows 7, XP-Pro, Vista, Linux Blog Entries: 1	Re: Unknown intruder has entered network There is no practical way, short of a physical connection, that an intruder can gain access to your wired network. Perhaps you can show us a screen shot of the issue? I'd disconnect EVERYTHING but the computer you're using from the router, then post the screen shot of what you think you see as evidence you have an intruder. To post a screen shot of the active window, hold the Alt key and press the *PrtScn* key. Open the Windows PAINT application and Paste the screen shot. You can then use PAINT to trim to suit, and save it as a JPG format file. To upload it to TSG, open the full reply window and use the Manage Attachments button to upload it here. __________________ If TSF has helped you, Tell us about it! or Donate to help keep the site up! Microsoft MVP - Windows Desktop Experience

05-12-2009, 04:36 AM	#6 (permalink)
SilverDwn Registered User Join Date: Mar 2009 Posts: 30 OS: XP SP2	Re: Unknown intruder has entered network Do you use a personal firewall? It is highly reccomended you do on any machine connected to the internet. Most firewalls prevent outside devices from initiating sessions with your PC.

05-12-2009, 09:24 AM	#7 (permalink)
Basenge Registered User Join Date: May 2009 Location: East Africa Posts: 20 OS: xp service park 2	Re: Unknown intruder has entered network In summary Mr Night shade install Cisco Firewall or Proxy server onto your network to filter out intrudes pop up's and remote access. Setup IP range with specific subnet