New To Mac-Forums?

Welcome to our community! Join the discussion today by registering your FREE account. If you have any problems with the registration process, please contact us!

Get your questions answered by community gurus Advice and insight from world-class Apple enthusiasts Exclusive access to members-only contests, giveaways and deals

Join today!

 
Start a Discussion
 

Mac-Forums Brief

Subscribe to Mac-Forums Brief to receive special offers from Mac-Forums partners and sponsors

Join the conversation RSS
OS X - Operating System General OS operation information and support

Strange Computer IP in "Shared"


Post Reply New Thread Subscribe

 
Thread Tools
talk2bks

 
Member Since: Sep 28, 2012
Posts: 6
talk2bks is on a distinguished road

talk2bks is offline


I noticed today that there is a "shared" computer on the sidebar. It is giving me an IP address that is not inside my house.

1. I've changed my WIFI password using WPA,
2. I've deactivated WIFI
3. I've turned off all computers in my house
4. I've unplugged all ethernet cables except the one going straight into my mac.
5. I've ran antivirus software.

The only thing that gets rid of the computer is if I turn off all file sharing in my firewall. But that blocks everything else like dropbox and skype.

The IP address is not my house but it is in my city. I've called my Internet provider and they say it has nothing to do with them.

What do I do?
QUOTE Thanks
bboggess

 
bboggess's Avatar
 
Member Since: Nov 02, 2011
Location: Western NY
Posts: 142
bboggess has a spectacular aura about
Mac Specs: late 2011 mac Mini, 2.3 GHz core i5, 8 GB 1333 MHz DDR3, Mountain Lion 10.8.4, Retina display iPad

bboggess is offline
1. Any kind of remote desktop software running?
2. Any virtual machine software running like vmware, parallells or virtual box? Sometimes those may create a share.
3. Have you rebooted your machine? The IP address that you gave does not ping.
4. Running "who" from the command prompt will let you see who is logged into your machine. In other words, open up a command prompt and type "who" without the quotes. Any user other than your user name is a poacher.
5. Reboot your router. Is your router default password changed. Not the WIFI password but the admin password.
6. Running netstat -a from the command prompt will give you a list of all ports on your computer that is accessible as well as what IP address is connected to it. In other words, open up a command prompt and type "netstat -a" without the quotes and you'll see a long list. It may take a minute to run. Wait until the command prompt returns.
7. From the command prompt type "whois 24.16.99.251" without the quotes. It will give you the ISP of the IP address with contact info. If this is not your ISP, perhaps check with them.

Hope this helps a little bit.

Bill
QUOTE Thanks
talk2bks

 
Member Since: Sep 28, 2012
Posts: 6
talk2bks is on a distinguished road

talk2bks is offline
Thanks Bill!!!

1. I don't have an remote desktop installed.
2. I have virtual box but haven't used it in months.
3. I have rebooted my computer, modem and router
4. When I do "who" it gives me

Brian console Sep 28 12:08
Brian ttys000 Sep 28 19:08

5. I have restarted the router and the modem but I will again. I have changed the admin password as well.
6. netstat -a gives me a bunch of stuff. 65+ lines before I get to the local unix. I don't know if that's normal. In the Local Address Column, all IPs are my local machine. However, there are a bunch of *.kerberos or *.ipp. I don't know if there should be wildcards. Also two of the responses had my local machine trying to connect to Kansas and the other to Germany. This could be due to any chrome extension.
7. The whois 24.116.99.251 is my ISP in my town. Just not my house. I did call them to see if this could be their system trying to do something. They said it wasn't.


The ip address is not pinging back for me either. I'm assuming that 24-116-99-251 is refering to an IP address.

Thanks for any reply.
QUOTE Thanks
dtravis7

 
dtravis7's Avatar
 
Member Since: Jan 04, 2005
Location: Modesto, Ca.
Posts: 27,640
dtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond repute
Mac Specs: iMac 2.4 C2D 10.9.4, iMac 2.16 C2d 10.6.8, Macbook2007 10.8.4, Mac Mini 10.8.4, iPhone 3GS Note 8!!

dtravis7 is offline
If you unplug the network cable does the share disappear?

You using Cable? DSL? If you turn off the modem does the share disappear?
QUOTE Thanks
peterbj7

 
Member Since: May 16, 2011
Location: Belize, Central America
Posts: 288
peterbj7 is on a distinguished road

peterbj7 is offline
I'm watching this very carefully as similar has happened to me, and I've never got to the bottom of it.
QUOTE Thanks
talk2bks

 
Member Since: Sep 28, 2012
Posts: 6
talk2bks is on a distinguished road

talk2bks is offline
Okay, taking Bill's advice I restarted the router one last time. Something I've done several times before. So far the computer has not shown back up. Here's what I did. I'm sure most is overkill but don't waist the 8 hours I have so far today if this may work for you in the first 5 minutes.

1. unplug modem.
2. turn off computer
3. unplug router.
4. wait.
5. plug in modem wait of all green lights.
6. plug back in router. wait. then hard reset (press the pinhole).
7. Start computer
8. log into router, factory reset, set router back up, changing wireless name to ATF Surv van #47.
9. Watch crackheads from next door leave.

So far the "Shared " computer has not shown back up. I'm keeping a close eye on it though.

This happened shortly after I updated: iTunes & Mamp pro 2.1.1. Last night my router kept crashing, knocking everything off line. All this combined could have done something.

The computer disappeared when I was either offline (so it's not internal), or when I stopped all file-sharing in my firewall.

I really hope this helps.
QUOTE Thanks
bboggess

 
bboggess's Avatar
 
Member Since: Nov 02, 2011
Location: Western NY
Posts: 142
bboggess has a spectacular aura about
Mac Specs: late 2011 mac Mini, 2.3 GHz core i5, 8 GB 1333 MHz DDR3, Mountain Lion 10.8.4, Retina display iPad

bboggess is offline
Was Mamp active when you had the "Share" showing up? Running server software can be cause for concern depending on how it was secured. Did you have ports opened on your router for Mamp for outside access? STRONG PASSWORDS are a must if you are running a server. Just something to consider.

Bill
QUOTE Thanks
talk2bks

 
Member Since: Sep 28, 2012
Posts: 6
talk2bks is on a distinguished road

talk2bks is offline
Mamp was not running and I don't have any ports opened. It's been several hours and the computer has not shown back up. Thanks for everyones help.
QUOTE Thanks
talk2bks

 
Member Since: Sep 28, 2012
Posts: 6
talk2bks is on a distinguished road

talk2bks is offline
New Developments:

I'm just sitting here and the computer pops back on. I've unplugged all unnecessary devices and it stays on. The only time it's going away is when I turn off file sharing. I'm going to be messing with those settings to see where the problem could be.

I'm going through the "Sharing" settings in the system prefs instead of the firewall which I did last time.

Check this out.
Inside sharing -> "Computers on your local network can access your computer at: "home.local"
I changed this to "cflare.local" -> turned off all file and printer sharing -> locked my settings -> waited 5 minutes and computer didn't show back up (revealing that it was something in here). -> Then I changed the name back to "home.local", and turned back on printer and file sharing because I decided to mess only with one setting at a time starting with the file sharing.

After turning my file sharing back on, the name "24.166.99.251" changed to "cflare" even with the computer location set at "home.local". Finding this strange, I changed the name to "overthere.local" -> waited 5 minutes and the shared computer never came back. -> I changed it back to "home.local" and now the computer name is "overthere".



This got me to thinking, what happens not when I unplug the router but unplug the modem. "Shared" computer stays. Unplug the router, it goes away. WIFI is turned off and all other computes in the house is off.
QUOTE Thanks
dtravis7

 
dtravis7's Avatar
 
Member Since: Jan 04, 2005
Location: Modesto, Ca.
Posts: 27,640
dtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond repute
Mac Specs: iMac 2.4 C2D 10.9.4, iMac 2.16 C2d 10.6.8, Macbook2007 10.8.4, Mac Mini 10.8.4, iPhone 3GS Note 8!!

dtravis7 is offline
What brand and model is your Router? I have a reason for asking.

Also do you have a print server of any kind?
QUOTE Thanks
cwa107

 
cwa107's Avatar
 
Member Since: Dec 20, 2006
Location: Middletown, Pennsylvania
Posts: 26,510
cwa107 has a reputation beyond reputecwa107 has a reputation beyond reputecwa107 has a reputation beyond reputecwa107 has a reputation beyond reputecwa107 has a reputation beyond reputecwa107 has a reputation beyond reputecwa107 has a reputation beyond reputecwa107 has a reputation beyond reputecwa107 has a reputation beyond reputecwa107 has a reputation beyond reputecwa107 has a reputation beyond repute
Mac Specs: 15" MBP, Core i7/2GHz, 8GB RAM, 480GB Crucial M500 SSD

cwa107 is offline
You've got a device that uses SMB or Bonjour on your network. It may be something like a printer or a connected Blu-Ray player that you're not thinking about. Check each of the devices attached to your network and unplug/disconnect them one by one until you find the culprit.

Liquid and computers don't mix. It might seem simple, but we see an incredible amount of people post here about spills. Keep drinks and other liquids away from your expensive electronics!
QUOTE Thanks
dtravis7

 
dtravis7's Avatar
 
Member Since: Jan 04, 2005
Location: Modesto, Ca.
Posts: 27,640
dtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond repute
Mac Specs: iMac 2.4 C2D 10.9.4, iMac 2.16 C2d 10.6.8, Macbook2007 10.8.4, Mac Mini 10.8.4, iPhone 3GS Note 8!!

dtravis7 is offline
Chris, I think you and I are on the same page. Reason I asked about the router is I have seen some with some kind of Server on board once. I have a feeling something is on that network he is not unplugging.

I had this TINY EDI Max print server once that was so small I forgot I even had it. It lost it's config and took over DHCP at 192.168.1.1 and messed up my whole network. Took hours of unplugging and then I found it had fallen behind the one computer table! It was so tiny I did not see it. Unplugged that and network was fine.
QUOTE Thanks
talk2bks

 
Member Since: Sep 28, 2012
Posts: 6
talk2bks is on a distinguished road

talk2bks is offline
I have a Linksys WRT54GP2. It has 2 phone ports for Vonage (which I don't use anymore). Everytime I make a change it can take 5 minutes for finder to either recognize the shared computer or get rid of the shared computer. I think that this could be print server related. I've seen this on other forums but because originally had (I thought it had) instead of some mac address.

When I first noticed the problem, I shut off wifi on my mac and plugged straight into my router. I turned off the wifi on my router and I unplugged everything else in my router. The only thing I did not physically turn off would be the roku box.

I'm curious if Chrome and the cloud printing is the culprit?
QUOTE Thanks

Post Reply New Thread Subscribe


« Internal and external microphones not working on my iMac. | iCloud contacts not synching across Macs! »
Thread Tools

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off
Forum Jump

Similar Threads
Thread
Thread Starter
Forum
Replies
Last Post
Advice requested for what to upgrade to. wickerman1138 Apple Desktops 10 06-28-2010 03:20 PM
Replacement Computer - MB or MBP? MWolverine Apple Notebooks 1 11-19-2009 04:08 PM
Can I connect an ethernet to a computer, to connect it to it's netowork? hunter2271 Internet, Networking, and Wireless 3 12-01-2008 03:05 AM
wtf just happened..... iLEFTOVERCRACK Apple Notebooks 9 06-12-2008 03:26 AM

All times are GMT -4. The time now is 12:13 PM.

Powered by vBulletin
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
X

Welcome to Mac-Forums.com

Create your username to jump into the discussion!

New members like you have made this community the ultimate source for your Mac since 2003!


(4 digit year)

Already a member?