Register FAQ / Rules Forum Spy Search Today's Posts Mark Forums Read
Go Back   MacRumors Forums > Apple Systems and Services > OS X > Mac OS X Server, Xserve, and Networking

Reply
 
Thread Tools Search this Thread Display Modes
Old Nov 29, 2012, 05:15 PM   #1
stubeeef
macrumors 68030
 
stubeeef's Avatar
 
Join Date: Aug 2004
Am I being hacked?

When I open the finder menu, I noticed under "shared" my kids computers and one called "tahasf-willist"
It is listed as a PC and I can't connect to it.
I kick it off by turning wifi off, but soon after (5-15 minutes later) it's back on.
I have no idea who it is, and there is only one PC in the house on the wireless.
I have a wireless password and but I also have 3 daughters that are doing god knows what on the internet half the time.
How can I find out who/what that is?
__________________
Change!
Real Change?
7in2 Fore!
stubeeef is offline   0 Reply With Quote
Old Nov 29, 2012, 05:21 PM   #2
ConCat
Banned
 
Join Date: Jul 2012
Location: In an ethereal plane of existence.
Get the MAC address from your router and try typing it into the box on this site http://www.coffer.com/mac_find/ it should give you some info.

Actually, this site seems better URL
ConCat is offline   0 Reply With Quote
Old Nov 29, 2012, 06:20 PM   #3
stubeeef
Thread Starter
macrumors 68030
 
stubeeef's Avatar
 
Join Date: Aug 2004
I'm using a time machine, how do I get the MAC address?
I can't connect to it and don't know how to find an address.

this is all I can get-I don't know that much about the networking/hacking world.

__________________
Change!
Real Change?
7in2 Fore!
stubeeef is offline   0 Reply With Quote
Old Nov 29, 2012, 07:23 PM   #4
stubeeef
Thread Starter
macrumors 68030
 
stubeeef's Avatar
 
Join Date: Aug 2004
I noticed it was on my iMac but not on the shared of another iMac.
I have Airport Utility up and I have the addresses of everything that's on the wireless router, next time it comes up on the finder as shared-it will have to be the new address-I'll try and track from there I guess.
__________________
Change!
Real Change?
7in2 Fore!
stubeeef is offline   0 Reply With Quote
Old Nov 29, 2012, 07:52 PM   #5
ConCat
Banned
 
Join Date: Jul 2012
Location: In an ethereal plane of existence.
It's pretty simple. Assuming you have the latest version of airport utility, just click on your router, and hover over the computer, the Hardware Address is what you should use. It's improperly labeled there in typical Apple fashion. It should be labeled as MAC Address.
ConCat is offline   0 Reply With Quote
Old Nov 30, 2012, 06:52 AM   #6
stubeeef
Thread Starter
macrumors 68030
 
stubeeef's Avatar
 
Join Date: Aug 2004
Well it popped up this morning-got the address and found out it was APPLE!
Why are they on my iMac---is there a setting somewhere I've screwed up and allowed this....or something else? I checked another iMac in the house and it doesn't seem to be happening on that one.
Here is what the hardware address gave me...


Or is it just an apple product and could be an individual? It isn't an iPhone in the house I checked all the hardware numbers-hmmm
__________________
Change!
Real Change?
7in2 Fore!
stubeeef is offline   0 Reply With Quote
Old Nov 30, 2012, 06:55 AM   #7
bizzle
macrumors 6502a
 
bizzle's Avatar
 
Join Date: Jun 2008
Looks like someone with a PC is on your network. Is your network secured?
__________________
get your own damn blood.
bizzle is offline   0 Reply With Quote
Old Nov 30, 2012, 06:56 AM   #8
stubeeef
Thread Starter
macrumors 68030
 
stubeeef's Avatar
 
Join Date: Aug 2004
I'm using a time capsule with a code WPA2 but the firewall on my computer isn't on.
I'm going to turn it on and see if it comes back..

edit: Firewall was/is on
__________________
Change!
Real Change?
7in2 Fore!
stubeeef is offline   0 Reply With Quote
Old Nov 30, 2012, 07:05 AM   #9
switon
macrumors 6502a
 
Join Date: Sep 2012
RE: that MAC address was originally assigned to Apple, not...

Quote:
Originally Posted by stubeeef View Post
Well it popped up this morning-got the address and found out it was APPLE!
Why are they on my iMac---is there a setting somewhere I've screwed up and allowed this....or something else? I checked another iMac in the house and it doesn't seem to be happening on that one.
Here is what the hardware address gave me...
Image

Or is it just an apple product and could be an individual? It isn't an iPhone in the house I checked all the hardware numbers-hmmm
Hi stubeeef,

This means the MAC address you found was assigned to the Apple, Inc. company to use as they pleased, and Apple gave it to whatever device you are finding on your network. It does NOT mean that Apple, Inc. is "on" your network. It does mean that some other piece of Apple equipment is on your network, and that could be anything from another router, TC, MBP, iPhone, iPad, ATV, iPod touch, AEB, AE, etc.

Switon

P.S. Do you have a Guest Network enabled on your TC? ...perhaps without a WPA2 password? If so, then any "guest" may connect to your TC's Guest Network.

If I were you, I would just record the MAC address that you are offended by, and then in the Airport Utilities Network pane, enable the Timed Access Control and add that offending MAC address and give it "No Access". Enter all of the MAC addresses of your other devices and give them "Everyday" access. Restarting your TC will then not allow that MAC address to connect to your TC. You will probably discover that one of your devices no longer is connected to your TC (perhaps an iPad, iPhone, etc.). Once you figure out which device has the offending MAC address, then you can return to Airport Utility and change the access for that MAC address from "No Access" to "Everyday".

Last edited by switon; Nov 30, 2012 at 07:15 AM. Reason: Added P.S.
switon is offline   1 Reply With Quote
Old Nov 30, 2012, 07:17 AM   #10
switon
macrumors 6502a
 
Join Date: Sep 2012
RE: Firewall should always be on...

Quote:
Originally Posted by stubeeef View Post
I'm using a time capsule with a code WPA2 but the firewall on my computer isn't on.
I'm going to turn it on and see if it comes back..

edit: Firewall was/is on
Hi stubeeef,

In my opinion, your computer's Firewall should always be on. Never turn it off -- that is, if you are concerned about security.

Switon
switon is offline   0 Reply With Quote
Old Nov 30, 2012, 07:18 AM   #11
stubeeef
Thread Starter
macrumors 68030
 
stubeeef's Avatar
 
Join Date: Aug 2004
here is what I've found..

I would like to find the physical address of the IP


I'm going to be embarrased if it's in my house..
__________________
Change!
Real Change?
7in2 Fore!
stubeeef is offline   0 Reply With Quote
Old Nov 30, 2012, 07:38 AM   #12
switon
macrumors 6502a
 
Join Date: Sep 2012
Quote:
Originally Posted by stubeeef View Post
here is what I've found..

I would like to find the physical address of the IP
Image

I'm going to be embarrased if it's in my house..
Hummm...your two screen shots don't jive!? The first one showed a MAC address that was assigned to Apple, the last one showed a different MAC address that was assigned to Intel. There is some confusion here.

Good luck,
Switon

Last edited by switon; Dec 1, 2012 at 11:39 PM. Reason: removed irrelevant material...
switon is offline   1 Reply With Quote
Old Nov 30, 2012, 08:03 AM   #13
switon
macrumors 6502a
 
Join Date: Sep 2012
RE: Timed Access Control....

Quote:
Originally Posted by stubeeef View Post
here is what I've found..

I would like to find the physical address of the IP
Image

I'm going to be embarrased if it's in my house..
So, using the Timed Access Control on your TC, you can keep the offending MAC address from connecting to your network.

Switon

Last edited by switon; Dec 1, 2012 at 11:40 PM. Reason: remove irrelevant material...
switon is offline   1 Reply With Quote
Old Nov 30, 2012, 10:16 AM   #14
JAT
macrumors 603
 
Join Date: Dec 2001
Location: Mpls, MN
I had something like this. Finally found a screen in my router that explained it is my printer. The printer is set up for scanning, so it shows up as a server in Finder. Or something like that. Now I just ignore it.
JAT is offline   1 Reply With Quote
Old Dec 1, 2012, 07:12 AM   #15
cgk.emu
Banned
 
Join Date: May 2012
Quote:
Originally Posted by switon View Post
So, using the Timed Access Control on your TC, you can keep the offending MAC address from connecting to your network.
This only stops the newest of noobs. It's always a hoot seeing non security people give security advice. Is it worth enabling? Sure...but, if the OP doesn't know what he is doing, and it seems like he doesn't, I wouldn't waste my time trying to explain.

As far as setting up a RADIUS server...why oh why would you suggest this on a HOME network? This is for WPA-2 Enterprise security. RADIUS servers are finicky to say the least, having an inexperienced home user set it up is 1) never going to happen, and 2) even if they get it set up they won't know how to properly administer/secure it so it would just be one more point of failure/entry for zomg teh bad ppls (or printers...oh speaking of, hackers can get in through printers, I personally know this, it's fun. The "moral" of the story is, no you aren't being hacked as a home user. You don't have anything of value!! It really irks me to hear "omfg I'm totes getting hax0red! by home users. No. No you aren't. You might be a target of a phishing scam down the road...it's much MUCH easier for a malicious hacker to gather info from super inexperienced home users by employing those tactics...okay so let's review: don't even attempt to set up a RADIUS server, that's a ridiculous idea, you aren't being hacked, learn what hacking actually is and involves, a strong WPA-2 password is really all you need as a home user, even those can be hacked...and it doesn't take that much. Also, if you are REALLY concerned, don't even use wireless. Any wireless really sucks hardcore in terms of security. Give someone enough time, they get enough IVs, and boom goes your wireless key.)

Last edited by cgk.emu; Dec 1, 2012 at 07:19 AM.
cgk.emu is offline   1 Reply With Quote
Old Dec 1, 2012, 07:40 AM   #16
justperry
macrumors 603
 
justperry's Avatar
 
Join Date: Aug 2007
Location: 7 Km South of an active upside down (boat) volcano.
Quote:
Originally Posted by stubeeef View Post
here is what I've found..

I would like to find the physical address of the IP
Image

I'm going to be embarrased if it's in my house..
Download IP Scanner, the normal one is free and it allows you to see devices on your network, most of the time it will also tell you what kind of a device it is-Mac-TV-Mobile-etc. even my Settopbox Dreambox shows up with brand.

IP Scanner
justperry is offline   0 Reply With Quote
Old Dec 1, 2012, 08:50 AM   #17
switon
macrumors 6502a
 
Join Date: Sep 2012
Quote:
Originally Posted by cgk.emu View Post
This only stops the newest of noobs.
Hi cgk.emu,

I'll defer to the security experts ...

Switon
switon is offline   1 Reply With Quote
Old Dec 1, 2012, 12:10 PM   #18
stubeeef
Thread Starter
macrumors 68030
 
stubeeef's Avatar
 
Join Date: Aug 2004
First, thanks for the help gang-It has been a great learning exercise-turns out it was a known device in the house...my panic was unfounded I suppose. It was weird because it would show up as a shared device on my iMac but no other Macs in the house. Like it was attached to this one..freaked me out.
I'm not offended by any terms that speak of me poorly in this realm as I will admit it. My weaknesses are around networking and security-no question. I should probably take a course or two on the subject-not sure if the apple store does classes on that or not.
I'm grateful for the help and I've installed the IP Scanner too, probably wouldn't stop or show anyone with talent-but anyone with talent would quickly learn I've got nothing to bother with taking either!
__________________
Change!
Real Change?
7in2 Fore!
stubeeef is offline   0 Reply With Quote
Old Dec 2, 2012, 09:11 AM   #19
Les Kern
macrumors 68030
 
Les Kern's Avatar
 
Join Date: Apr 2002
Location: Alabama
Quote:
Originally Posted by cgk.emu View Post
This only stops the newest of noobs. It's always a hoot seeing non security people give security advice.
Shhhhhhush now. It's the only entertainment I get on MR.
Les Kern is offline   0 Reply With Quote
Old Dec 2, 2012, 09:18 AM   #20
justperry
macrumors 603
 
justperry's Avatar
 
Join Date: Aug 2007
Location: 7 Km South of an active upside down (boat) volcano.
Quote:
Originally Posted by stubeeef View Post
First, thanks for the help gang-It has been a great learning exercise-turns out it was a known device in the house...my panic was unfounded I suppose. It was weird because it would show up as a shared device on my iMac but no other Macs in the house. Like it was attached to this one..freaked me out.
I'm not offended by any terms that speak of me poorly in this realm as I will admit it. My weaknesses are around networking and security-no question. I should probably take a course or two on the subject-not sure if the apple store does classes on that or not.
I'm grateful for the help and I've installed the IP Scanner too, probably wouldn't stop or show anyone with talent-but anyone with talent would quickly learn I've got nothing to bother with taking either!
Today I opened IP Scanner and I saw three Devices with an Windows Icon before it, my Wireless network has WPA2 so the chance somebody breaks into is lower.
What it turned out to be is this.
I am connected with a 3G USB dongle (In Asia) and those devices were PC's on the same IP range.
That's just unacceptable, that I can see Users on a Cell Towers network, it also goes the other way around.
I could even connect to one and see his C and E HDD's and Users.
justperry is offline   0 Reply With Quote

Reply
MacRumors Forums > Apple Systems and Services > OS X > Mac OS X Server, Xserve, and Networking

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Similar Threads
thread Thread Starter Forum Replies Last Post
May have been hacked? jiker OS X 5 Oct 21, 2013 11:00 PM
Have I been hacked? appleseedeater OS X 5 Jun 12, 2013 03:19 PM
Hacked Need Help CapeFearless MacBook 0 Jan 9, 2013 03:40 PM
Have I been hacked??? cjr611 Mac Basics and Help 7 Sep 27, 2012 02:55 PM
Hacked? nwebb Mac OS X 10.7 Lion 3 Jul 14, 2012 12:52 PM

Forum Jump

All times are GMT -5. The time now is 12:32 AM.

Mac Rumors | Mac | iPhone | iPhone Game Reviews | iPhone Apps

Mobile Version | Fixed | Fluid | Fluid HD
Copyright 2002-2013, MacRumors.com, LLC