Did you by chance look at the logs of your router? (If that is logging) can you see an in bound connection to your box? Is there a WAP in the house? Is it secured? WPA2? If so what about those logs? Any unusual machine names on the network toplogy? (meaning is someone squatting on your network and you dont know yet? )<div>
<br></div><div>Just ideas.</div><div><br></div><div><br></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Sun, Dec 16, 2012 at 1:33 PM, Gregory Boyce <span dir="ltr">&lt;<a href="mailto:gregory.boyce@gmail.com" target="_blank">gregory.boyce@gmail.com</a>&gt;</span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><p dir="ltr">RFC1918 which defines internal ip space doesn&#39;t include all of 172.*.  Most of it is public space. </p>
<div class="HOEnZb"><div class="h5">
<div class="gmail_quote">On Dec 16, 2012 1:10 PM, &quot;David P. Connell&quot; &lt;<a href="mailto:davec99@charter.net" target="_blank">davec99@charter.net</a>&gt; wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">


  
    
  
  <div text="#000000" bgcolor="#FFFFFF">
    <div>172....  default Airport wireless
      address range?<br>
      <br>
      <br>
      <br>
      <br>
      On 12/16/2012 12:16 PM, Theo Van Dinter wrote:<br>
    </div>
    <blockquote type="cite">
      <p dir="ltr">I&#39;m not sure why you&#39;re looking up a 172 IP address.
        The output is a host name not an IP. 
        c-24-91-141-173.hsd1.ma.comcast. net.  Is this your cable modem?</p>
      <div class="gmail_quote">On Dec 16, 2012 12:09 PM, &quot;Bill
        Mills-Curran&quot; &lt;<a href="mailto:bill@mills-curran.net" target="_blank">bill@mills-curran.net</a>&gt;
        wrote:<br type="attribution">
        <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
          I was looking at the output of &quot;last&quot; recently and found
          several<br>
          entries like this on my home server:<br>
          <br>
          userxx  pts/0        c-24-91-141-172. Sun Dec  2 14:57 - 15:09
          (00:11)<br>
          <br>
          (userxx represents my username)<br>
          <br>
          I did a reverse lookup on <a href="http://172.141.92.24" target="_blank">172.141.92.24</a>:<br>
          <br>
          host 172.141.92.24<br>
          <a href="tel:24.92.141.172" value="+12492141172" target="_blank">24.92.141.172</a>.in-addr.arpa domain
          name pointer <a href="http://AC8D5C18.ipt.aol.com" target="_blank">AC8D5C18.ipt.aol.com</a>.<br>
          <br>
          Looks like something from AOL.<br>
          <br>
          I got a little freaked, so I changed my password and also
          blocked that<br>
          IP in /etc/hosts.deny.<br>
          <br>
          I&#39;m not an aol user, but my wife is...  but the &quot;last&quot; output
          shows<br>
          this as connecting with my username.<br>
          <br>
          Any ideas?<br>
          <br>
          Thanks,<br>
          Bill<br>
          _______________________________________________<br>
          Wlug mailing list<br>
          <a href="mailto:Wlug@mail.wlug.org" target="_blank">Wlug@mail.wlug.org</a><br>
          <a href="http://mail.wlug.org/mailman/listinfo/wlug" target="_blank">http://mail.wlug.org/mailman/listinfo/wlug</a><br>
        </blockquote>
      </div>
      <br>
      <fieldset></fieldset>
      <br>
      <pre>_______________________________________________
Wlug mailing list
<a href="mailto:Wlug@mail.wlug.org" target="_blank">Wlug@mail.wlug.org</a>
<a href="http://mail.wlug.org/mailman/listinfo/wlug" target="_blank">http://mail.wlug.org/mailman/listinfo/wlug</a>
</pre>
    </blockquote>
    <br>
    <br>
    <pre cols="72">-- 
David P. Connell
&quot;Watch where you&#39;re going; remember where you&#39;ve been.&quot;</pre>
  </div>

<br>_______________________________________________<br>
Wlug mailing list<br>
<a href="mailto:Wlug@mail.wlug.org" target="_blank">Wlug@mail.wlug.org</a><br>
<a href="http://mail.wlug.org/mailman/listinfo/wlug" target="_blank">http://mail.wlug.org/mailman/listinfo/wlug</a><br>
<br></blockquote></div>
</div></div><br>_______________________________________________<br>
Wlug mailing list<br>
<a href="mailto:Wlug@mail.wlug.org">Wlug@mail.wlug.org</a><br>
<a href="http://mail.wlug.org/mailman/listinfo/wlug" target="_blank">http://mail.wlug.org/mailman/listinfo/wlug</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><span style="font-size:small;line-height:16px">Gentlemen, </span><em style="font-style:normal;color:rgb(0,0,0);font-size:small;line-height:16px">we can</em><span style="font-size:small;line-height:16px"> rebuild him. </span><em style="font-style:normal;color:rgb(0,0,0);font-size:small;line-height:16px">We have the technology</em><span style="font-size:small;line-height:16px">.</span><br>
<br>
</div>