i do not have protection enabled - i have a mac address filter enabled - so no one should be able to hop on my network as such
any other ideas?
MAC address filtering is easy to bypass by spoofing. Don't rely on that for your security. The minimum that I would call "safe" is WPA, with a good passkey.
In such a case I would disconnect everything and disable the airport. Then add one piece at a time and see when it appears.