Wierd DHCP entry

[MoFunk]

I have searched around and have yet to find a solid answer if this is a hack attempt, worm, virus, or spyware. But in my router last night I found 3 entries for a host called detective, with a funky MAC address. Has anyone else seen this?

I am running a smoothwall router and have a netgear router for wireless. The wireless has WEP enqabled with 128bit, it has MAC filtering and does not broadcast the SSID. So I thought maybe someone broke in that way, but I have seen a couple of post's on another forum that they have the same thing and DO NOT have wireless.

Any idea's?

I have already scanned one pc for spyware and all my PC's have the latest DAT's and scan every night and had nothing in the logs.

 

[Cheetah8799]

Are these dhcp entries on your netgear wireless router? I know Smoothwall doesn't have the dhcp table implemented by default unless you do the custom hacks. Have you done that? I'm thinking about doing it on mine.

If it's on your netgear, then your wireless network probably got hacked by a neighbor or something. It happened to me once so far, so I changed all my wep keys and stuff. I had mac filtering on, ssid off, but the s.o.b. got in anyway... bastard...

Anyway, that's my guess. Go beat up any neighbor punk kids you suspect of hacking your network.

EDIT: Here's the smoothwall custom mod I mentioned: link

 

[MoFunk]

Not on the netgear, it is a smoothwall hack, not that particular one. Hmmm..... I will have to keep an eye on the nieghbors.

Is there any utility that you can get that will detect wireless cards. Not access points, but something that can detect if someone is next door trying to gain access?

 

[netsysadmin]

Here is a good monitoring program that will alert you of unauthorized wireless users

Airsnare

John