Stealth mode connection attempts?  Reason for Open DNS in router settings?

Console is giving me repeated messages (many times per minute) that read
"Stealth Mode connection attempt to UDP xxxx  from 208.67.222.222:53"
That's a little scary to the uninitiated!   I've done some rummaging here and across the net on this.  I understand little of what I found or how to stop this.  I understand that the 208.67.222.222 is Open DNS related.  I was glad to discover that as I originally thought some malicious computer somewhere was trying to gain access to my MacBook Pro.  I thought I'd delete the DNS servers to see if that would help, but they are greyed out in the Preferences--Network--DNS panel and cannot be removed. 
From what I've investigated, those Open DNS servers are set in the router.  I know how to change or delete those, but maybe I shouldn't.  In fact, maybe someone can remind me why I put them in there in the first place (years ago).  I vaguely recall some advantage to using Open DNS (faster?), although I'll confess that, of late, too often mistyped web addresses go to an Open DNS page, which is a nuisance.
In any event, I'd like to do something that would stop the stealth mode "attacks".  While I'm sure I could ignore it, maybe it's eating up some browser or network time.  It also seems odd that it would go on and on! 

Thanks for some info on this.  Should I only see it then, when I'm in a browser?  Or, when wi-fi is on?  I'm assuming that the Mac may be checking what time it is, although it seems a little too frequent for that!  (3 times a minute?  Well, maybe that's about right, but then Apple and Open DNS should coordinate so that this message doesn't show up.)
I did find this:  http://forums.opendns.com/comments.php?DiscussionID=1785
Does that make sense?  It's completely benign?  And doesn't waste CPU cycles?
One problem with all this stealth mode logging is that it fills up the Console message window!  It thus means that there is gobs of stuff I have to wade through to see if there really is something going on from the outside!
I did find two oddballs in there (I don't think they were open DNS as they weren't 208s), so the firewall is doing something.

Similar Messages

  • Ipfw: Stealth Mode connection attempt to UDP...

    Hi all,
    I recently encountered internet slow down at home. I connect to internet using a wireless router, which has been used for almost a year without any problem. The router has WEP setup and MAC address filter enabled.
    When I open the firewall log, I found that my router is keep using different ports (from 6355 down to 2063), trying to connect the port 137 of my Mac Mini. I have checked that port 137 is related to NetBIOS. The following is extracted from the firewall log (with my host name masked).
    May 18 00:46:54 ------- ipfw: Stealth Mode connection attempt to UDP 192.168.2.2:137 from 192.168.2.1:2058
    May 18 00:47:03 ------- ipfw: Stealth Mode connection attempt to UDP 192.168.2.2:137 from 192.168.2.1:2059
    May 18 00:47:06 ------- ipfw: Stealth Mode connection attempt to UDP 192.168.2.2:137 from 192.168.2.1:2059
    May 18 00:47:18 ------- ipfw: Stealth Mode connection attempt to UDP 192.168.2.2:137 from 192.168.2.1:2059
    May 18 00:47:28 ------- ipfw: Stealth Mode connection attempt to UDP 192.168.2.2:137 from 192.168.2.1:2060
    May 18 00:47:30 ------- ipfw: Stealth Mode connection attempt to UDP 192.168.2.2:137 from 192.168.2.1:2060
    May 18 00:47:42 ------- ipfw: Stealth Mode connection attempt to UDP 192.168.2.2:137 from 192.168.2.1:2060
    The IP address of my router is 192.168.2.1 and my Mac Mini is 192.168.2.2. I have checked from the router administrative page and can't find any other machine in my wireless network. I have no idea what's wrong with my router. Any idea please? Thanks for any advice in advance.
    Best regards,
    TC
    Mac Mini 1.4G (PowerPC) | iPod Shuffle (2nd Gen)   Mac OS X (10.4.9)   1GB

    Hi Rick,
    Thanks also for your response.
    Do you have a network printer? (make, model, please)
    Any other network devices on this LAN (Xbox, printer,
    PC :o
    I don't have a network printer. The little network only consists of the router and the Mac for the time being.
    Do you have uPNP enabled on your router?
    What make/model of router? (there may be something
    common to this mfr)
    No, the uPNP is never enabled. My router is Belkin Wireless G Router (F5D7230-4), which is supposed quite Mac-friendly in the market...
    You say you still get the logging, even when the DSL
    modem is disconnected. Weird.
    Yes, it is weird.
    StealthMode has been known to cause more paranoia in
    some users. This 137 port scanning might be coming
    from a printer or other network device on the inside
    of your little network...with stealth disabled,
    things would just work the way they're supposed to --
    quietly. Your mac is probably secure. Your router is
    probably secure (especially if you changed the admin
    password when you set it up. If you've been using the
    default admin password, then shame on you <wink>
    I have enabled Stealth mode in my Mac. Sorry to let you down (^^V) that I am not using the default password before the discovery of the port probing mentioned and have changed to another one after reset and firmware upgrade as advised by the other poster.
    Am I off-base here, fellows?
    Nope, you're appreciated for any idea trying to help.
    TC
    (P.S. I found that the "Helpful" is used up. Sorry that I can't give you one...)

  • Have I been hacked??? "Stealth Mode connection attempt to UDP"

    My Mac Mini has been running very slowly lately. Sometimes it takes half a minute to switch between apps, and I mean simple apps like Mail and Safari and Appleworks, not Photoshop. Photoshop is a joke it runs so slow. So I've run Onyx SEVERAL times, restarted and cleared my PRam, and nothing is helping. I also noticed it seemed like my Mini was "running" a lot (the hard drive making a noise like it was up to something when I'm not doing anything). So I looked at the cable box and the Ethernet light was flashing softly, going along with the hard drive noise. Then I downloaded something called MenuMeters and it is showing that I'm receiving data constantly - it goes between about 300B/s to 1500B/s, and sometimes it shows I'm sending too. So I opened up the System Preferences and found out that "Network Time" was enabled in the Firewall preference pane. I unchecked that but my Mini is still receiving. (I'm not on any Ethernet network or anything either.) So I opened Advanced and found that the "Block UDP Traffic" box is not checked, though the other two "Enable Firewall Logging" and "Enable Stealth Mode" are checked. THEN I opened the log file and was shocked to see 1048 lines, mostly reading ""Stealth Mode connection attempt to UDP," although once in a while I saw a few that said "12190 Deny TCP." And that 1048 is just for yesterday and today. Is that normal??? Sometimes the "Stealth Mode connection" lines are single (I mean, not to a repeating number), but sometimes they repeat two, three, even five times to the same number.
    Have I been hacked? Is someone stealing our small business data? Sounds kind of ridiculous, but can't help and worry some. Or do I have a virus? I tried to google whether or not there are any Mac viruses out there, that might pertain to this, but couldn't figure out anything. What do I do? I'm not very computer savvy, other than running my apps, and don't anything about Terminal or things like that. Even as I type this MenuMeters is showing me I'm receiving SOMETHING. Yikes!
    Mini   Mac OS X (10.4.8)  

    You mention one of the applications you have been using is Appleworks - which is not supplied with Intel systems, only PPC Macs. This would tend to suggest that your mini is a G4 model. It would be helpful to know which model the system is, what software you have on it, how much free space you have on your hard drive, and what you typically use the system for.
    It's interesting that you note the system seems generally busy, which would go some way to explain why it may also seem rather slow, but you haven't mentioned whether you've run Activity Monitor to see what processes are active when the system seems to be active with some task that is not of your doing. If you haven't tried this yet, do so now - and let us know what processes the system shows as active when otherwise the system ought to be idle.
    To answer a few of your broad questions: When the system is connected to the internet, it's not unusual to see a certain amount of data through-putting the network connection, but in most instances this would be in the region of 100-200B/s, with occasional, brief, spikes upwards of that. In the absence of a local router that level of data is likely to be higher, since basically your Mac is managing your internet connection and maintaining a public IP address assigned by your service provider. In a system with a router, the router handles this traffic so the resultant volume of data the Mac sees would be less.
    The fact you see entries in the log of the sort you describe is not necessarily an indicator of a problem. It may suggest that the system is being probed, which as Boece has said is not at all uncommon for a system with a public IP number - and is indeed why it's most common to find systems being used 'behind' a router. The router takes the public IP number, and so systems behind it are given internal addresses by the router which are not visible to the outside world. The Router then performs something called Network Address Translation (NAT) which converts internal and public addresses as needed to ensure the computer can communicate with the internet while still staying 'invisible'.
    In your position, I would look to add a basic router between your Mac and your cable/DSL modem because a hardware firewall is generally more effective than a software firewall, and NAT will keep your system clear of most potential hacking risks.
    As for the potential for a virus - this is a bit of a thorny subject because most will (rightly) say that MacOS is not the target of any known virus that exists in the wild. Unfortunately, that doesn't mean that it will remain that way, or that it's impossible to create malware that can infect or impact Mac systems. A good line of defense can be obtained by downloading and installing ClamXav (http://www.clamxav.com/) and setting it to examine vulnerable spots such as the desktop where files are typically downloaded or your mail folders, and using it to scan the system. Generally speaking, unlike antivirus products for Windows, this software does not consume copious amounts of CPU time (it grabs between 1 and 5% on my 1.25 G4 mini while in the background) so it's worth having around.
    You also mention running OnyX several times - this is not a good thing. OnyX, like the other utilities of this type, is a useful tool in resolving performance issues, but if you find that it doesn't work when you use it once, it indicates the problem is not something that OnyX can resolve. Running it multiple times doesn't necessarily do any harm, but it does mean that macOS is continually having to build new cache files etc, which makes the system run very badly!
    So....
    (1) tell us about your system, the software on it and what you use it for.
    (2) how much free space is on your hard drive.
    (3) run Activity Monitor and tell us what it shows when the system seems to be busy doing it's own thing.
    (4) download ClamXav and run it as described.
    (5) get an inexpensive router and insert that into your system as described (we can help explain how to set everything up once you've got it if you need assistance).

  • Firewall - stealth mode connection attempts from AEBS to computer

    Console log is packed with Info messages realted to connection attempts from AEBS router. Is that normal?
    also, system profiler states:  Firewall Logging:          No /  Stealth Mode:          No. Why the discrepancy?

    R C-R wrote:
    I suggest not taking Mr. Lambert's "bad design" commnets too seriously.
    AFAICT, the string "bad design" does not appear in the post I referred to. Please do not chastise Terry Lambert (whoever he or she may be) for someone else's sins. If anyone said 'bad design', it was I.
    he seems to have confused the IP addresses of two different network devices (his Mac & his Airport router) & suggested loopback
    No, he didn't; you misunderstood. What he is saying is that his network device (Airport, or, en1) is talking to itself through the router instead of through loopback.
    He also seems to have concluded that UDP's lack of a handshake protocol makes it a "connectionless" protocol, which makes no sense
    Terry Lambert was correct; you may have misunderstood the technical term in question. For instance, a quick look in Wikipedia reveals that,
    "In telecommunications, connectionless describes communication between two network end points in which a message can be sent from one end point to another without prior arrangement. […] Internet Protocol (IP) and User Datagram Protocol (UDP) are connectionless protocols." (The stress is mine.)
    But Wikipedia is not always to be trusted. We are not a bunch of techies here, so I'll turn to an easy, plain-language reference:
    "A connectionless protocol doesn’t go to the trouble of establishing a connection before sending a packet. Instead, it simply sends the packet. TCP is a connection-oriented Transport layer protocol. The connectionless protocol that works alongside TCP is called UDP." (The stress is mine.)
    Lowe, D. (2008). Networking all-in-one desk reference for dummies, 3rd edition. Indianapolis, IN: Wiley Publishing, Inc. ISBN 0470179155, p. 31.

  • I thought AppleTv & the reason for the new n router with USB HD port

    I thought the whole reason for the new Airport n router with USB HD connection was to be able to connect a large, 500GB USB hard drive to the Aiport n. Then have ripped movies or photos stored on this network drive. And then AppleTV could stream from this hard drive? The 40gb AppleTV HD becomes mostly for the OS.
    Now that is a powerful marriage of Apple hardware.

    I thought the whole reason for the new Airport n router with USB HD connection was to be able to connect a large, 500GB USB hard drive to the Aiport n. And then AppleTV could stream from this hard drive?
    Nope. As with iTunes Sharing, an Apple TV cannot use a library directly from a hard drive. You must have a computer running iTunes for the Apple TV to connect to.
    You can, I believe, put your iTunes library on the Airport-shared hard drive, but I wouldn't be comfortable doing that if it were me. My view on such wireless hard drives is that they're best for file transfers and backups, not for use as one's primary storage device.

  • Remote connection to SAP is failed due to router settings in SMP

    Dear Gurus,
    We have configured saprouter for our landscape in solution manager server.
    we want to open remote connection to SAP for our systems.
    in service.sap.com I tried to maintain the saprouter details
    but it is not allowing me to edit IP address
    for ex: in the SAP-Router tab when i gave hostname of saprouter , it is automatically
    selected as another IP address which is unique.
    Could you please guide us , how can we proceed further and give remote connections to SAP
    Thanks and Regards

    hi,
    If you want to change the IP address of your router than you have to open a OSS message to change the IP. Customer can not change the router IP address. After your message SAP will change the IP.
    Thanks & Regards
    kARAN

  • HT2463 Air Play icon disappears after a few seconds of opening ports in router settings.

    The AIr Play icon no longer consistently appears on my iMac or my iPad.  Apple TV is 3rd gen, iPad is 4th gen, iMac is latest (2012) router being used is Linksys (Cisco) E3000.  Opened TCP ports 123, 3689, and UDP 5353, and after saving the router settings, the Air Play icon appeared on iPad but disappeared again after less than a minute.  The Air Play also appeared on my iMac and when I clicked the rainbow wheel appeared and after less than a minte the Air Play icon vanished again.  I have performed restores of the AppleTV both by using the iMac with a micro USB  and also did a restore while connected to the television.  Any other suggestions before I take it into the local Apple store?  Thanks.

    I set an appointment at local Apple store Genius bar.  The tech helped walk through and eliminate possible variables until we agreed it must be a problem with my router.  BTW, the tech hooked up my Apple TV at the store and it worked perfectly using the Apple store network.  I went home and restored my router to the factory default (like out of the box when it was new) and re-set it up.  When I finished my Apple TV has been displaying the AirPlay icon flawlessly.  Hopeful it will continue, but resetting one's router to factory defaults may fix your problem if you are expeiencing same issue when the AirPlay icon goes missing.

  • Airport Extreme with ATT Router for Open DNS use

    I'd like my whole home network to have a filter on it so all computers and hand devices are protected. I get my internet with an ATT router which I can not change the DNS servers. ATT says they can not be changed. But I have an airport extreme directly connected to the ATT router. The extreme supplies wi-fi to the house. I can not change the DNS settings in the extreme. They are grayed out. I'm assuming it has something to do with the connection to the ATT router. Does anyone know how I can put a DNS address in the extreme?
    Some of the settings on the extreme are:
    Internet Tab: connect using DHCP, DNS Servers "grayed out", Domain Name "grayed out"
    Network Tab: Router Mode (off (bridge mode))
    thanks!

    Does anyone know how I can put a DNS address in the extreme?
    Not sure what you mean that you cannot enter the DNS numbers on your AirPort Extreme configuration page.
    Open up AirPort Utility and select the Internet tab
    Look at the first DNS entry there. There should be a cursor at the beginning of the DNS Server Box. If not, click to set the insertion point at the beginning of the box.
    Simply start typing in the DNS server number that you want to use.....208.67.222.222...... and it will overwrite the grayed out values there.
    Do the same for the second DNS box....208.67.220.220.
    Click Update at the lower right and you are all set.

  • How to change default software in Blackberry Connect 4.0 for opening attachment​s

    I have downloaded and installed Adobe Reader LE 2.5 to a Nokia E51 running Blackberry Connect 4.0 to overcome an issue with Adobe attachments not displaying files correctly.
    When opening Adobe attachments in Blackberry Connect 4.0 it uses Adobe Reader LE 1.5 not the later version.
    I can open Adobe files resident on the phone and card memory using Adobe reader 2.5 OK.
    I am unable to save attachments from Blackberry Connect 4.0 to the phone or card memory to be able to use v2.5
    Is there a way to change the default attachment software Blackberry Connect 4.0 uses on the Nokia handset?
    Quick Office Support advised is a Blackberry Connect 4.0 Issue.

    The current version supports only 'push pull' email and calendar services. It effectively works using an older BES server functionality. As I understand it, the 4.0 version supports the BES 4.0 feature set. This should allow for full synchronisation of email, contacts, and calendar / to-do items. It apparently also supports the latest admin features such as enabling the device over the air (rather than using the desktop client for this).
    While the current version is certainly better than nothing, having the full BES 4.0 feature set would be a huge step forward in my opinion.
    -N-

  • Odd stealth connection attempts

    Dear community,
    Looking for advice on security.
    I'm looking at my Console's appfirewall.log, and I'm getting relentless connection attempts like these on my laptop:
    Dec 29 20:31:43 *********MacBook-Pro Firewall[85]: Stealth Mode connection attempt to UDP 10.200.1.89:51413 from 186.105.225.249:41018
    Dec 29 20:31:45 *********MacBook-Pro Firewall[85]: Stealth Mode connection attempt to TCP 10.200.1.89:51413 from 24.93.125.238:60554
    Dec 29 20:31:46 *********MacBook-Pro Firewall[85]: Stealth Mode connection attempt to TCP 10.200.1.89:51413 from 186.105.225.249:48229
    Dec 29 20:31:48 *********MacBook-Pro Firewall[85]: Stealth Mode connection attempt to TCP 10.200.1.89:51413 from 24.93.125.238:60554
    Dec 29 20:31:52 *********MacBook-Pro Firewall[85]: Stealth Mode connection attempt to UDP 10.200.1.89:51413 from 66.41.205.203:52839
    Dec 29 20:31:54 *********MacBook-Pro Firewall[85]: Stealth Mode connection attempt to TCP 10.200.1.89:51413 from 24.93.125.238:60554
    Dec 29 20:31:59 *********MacBook-Pro Firewall[85]: Stealth Mode connection attempt to TCP 10.200.1.89:51413 from 117.254.218.104:65083
    ...on and on for hours at a time.
    What is going on here?
    Thank you!

    Hi,
    I looked up the 24.93.125.238 number and this belongs to Road Runner who are an ISP.
    The other numbers that start 24.xxx... also look like they are in the range owned by Road Runner.
    66.41.205.203 is Comcast (another ISP)
    186.105.225.249 covers an area for Latin America and  Caribbean.
    I have not checked the others.
    Note.
    The iChat and Messages app sends Pings when trying to connect in Video or Audio Only or Screen Sharing
    If the Stealth option in the Mac Firewall is On it blocks these and you cannot connect these types of chats.
    This may give you some clues as to why you are getting these attempts.
    9:15 pm      Sunday; December 29, 2013
      iMac 2.5Ghz 5i 2011 (Mavericks 10.9)
     G4/1GhzDual MDD (Leopard 10.5.8)
     MacBookPro 2Gb (Snow Leopard 10.6.8)
     Mac OS X (10.6.8),
     Couple of iPhones and an iPad

  • Stealth mode attempts

    I seem to be getting a lot of messages in my Console log about:
    11/15/10 10:17:22 PM Firewall[61] Stealth Mode connection attempt to UDP "numbers here" from "numbers here." I took out the numbers because I don't know if it is safe to post them.
    It just seems a very high number of hits.
    I connect to an AEBS to a cable modem.

    http://discussions.apple.com/thread.jspa?messageID=12592096#12592096

  • Stealth mode logs in ipfw.log

    Every so often I get logs like this in my /var/log/ipfw.log:
    Jan 20 08:41:33 PowerBook ipfw: Stealth Mode connection attempt to TCP 10.0.1.x:53725 from xxx.xxx.xxx.xxx:80
    These log entries do not show an ipfw rule number. So how can I tell which rule from ipfw is causing them to be logged? Are they being logged before matching any of the rules you see on the command sudo ipfw show?

    Hi Rick,
    Thanks also for your response.
    Do you have a network printer? (make, model, please)
    Any other network devices on this LAN (Xbox, printer,
    PC :o
    I don't have a network printer. The little network only consists of the router and the Mac for the time being.
    Do you have uPNP enabled on your router?
    What make/model of router? (there may be something
    common to this mfr)
    No, the uPNP is never enabled. My router is Belkin Wireless G Router (F5D7230-4), which is supposed quite Mac-friendly in the market...
    You say you still get the logging, even when the DSL
    modem is disconnected. Weird.
    Yes, it is weird.
    StealthMode has been known to cause more paranoia in
    some users. This 137 port scanning might be coming
    from a printer or other network device on the inside
    of your little network...with stealth disabled,
    things would just work the way they're supposed to --
    quietly. Your mac is probably secure. Your router is
    probably secure (especially if you changed the admin
    password when you set it up. If you've been using the
    default admin password, then shame on you <wink>
    I have enabled Stealth mode in my Mac. Sorry to let you down (^^V) that I am not using the default password before the discovery of the port probing mentioned and have changed to another one after reset and firmware upgrade as advised by the other poster.
    Am I off-base here, fellows?
    Nope, you're appreciated for any idea trying to help.
    TC
    (P.S. I found that the "Helpful" is used up. Sorry that I can't give you one...)

  • Constant Freeze/Hang associated with UPD connection attempt

    As suggested in another post, I have been monitoring the system logs with Console and the freezes/hangs and beach balls perfectly coincide with numerous (>15/per occurrence) of the following message:
    9/7/09 6:21:33 PM Firewall54 Stealth Mode connection attempt to UDP 10.0.1.6:59119 from 10.0.1.1:53
    Any thoughts?
    Previous Background:
    I am experiencing nearly constant freezing/beach balls. I can barely type this as it hangs up every 30 seconds or so. It happens in all applications and the finder. The issue started a few months back (with an update I suspect), and I have since installed SL with negative results.
    I have repaired permissions and the disk from the SL install disk and checked the hardware with the original system disks: all with no problems reported. Activity Monitor shows 27 GB free space on the HD, more than half the memory available and minimal CPU activity. Also, reset the PRAM again with no improvement.
    Not sure where to head from here, aside from installing SL from a clean disk...

    A quick update to my issue: after more than 7 phone calls to Apple Tech Support, (who were more than helpful!) it took the macbook into the local repair shop. Turns out while the HDD did not fail any diagnostic test, replacing the HDD cured all issues.
    Thanks again to those that offered assistance; and after all that I got an upgraded HDD 120 GB to 320 GB... could have been worse!

  • Open DNS & Airport Question

    I have a wireless network (Airport Extreme and Airport Express for range in the back of my house). Have 4 Macs on the network. All have Open DNS set in System Prefs>Network>Airport>Advanced>DNS.
    Should I set one or both of the Airports to Open DNS also? If so, how? I looked at Airport Utility and see no ready way to do it.
    If I should add OPen DNS to Airport, can someone tell me how in an easy to follow fashion?
    Thanks in advance!

    No, sorry.
    All my machines are individually set for Open DNS: System Prefs>Network>Airport>Advanced>DNS: 208.67.222.222; 208.67.220.220.
    The machines have been set this way for a long time.
    My Q: Can/Should I set my Airports (Express and Extreme) somehow for Open DNS?
    My general configuration is:Cable>Modem>Airport>4 Macs.
    The hardware configuration is Cable into Router (Cox), Ethernet into Extreme, broadcast to Express 5 rooms away (to serve 2 of the 4 Macs); Ch 1 all.
    Perfect connection - so don't want to mess with that.
    Just want to know (if I can to speed up download time) --
    Would (if possible) setting the Airport settings to Open DNS help my speed? If so, how in the world would one do that - - > set the actual base station to have Open DNS settings?
    Make sense? Hope so!
    Thanks!
    Message was edited by: pcbjr

  • Cisco Linksys E3000 - Open DNS Error

    I just purchased a Cisco Linksys E3000 and got it set up pretty much the way I want it. My only remaining problem is I wish to used Open DNS as my DNS server. On Line chat support says,"Please access router set up. Under the set up tab you will see the option for DNS1 and DNS2 please change it to 208.87.222 & 208.67.220 and save settings". I replied"I am on the basic set up page and currently I see Static DNS 1 thru 3 which are currently all zeros is that where you want me to put the new DNS numbers?"
    I made the changes as directed, saved and also flushed the DNS cache in Windows and in Firefox, rebooted and everything worked great.
    The problem is if the computer goes to sleep or is shut down when it restarts it cannot find the DNS server! What am I missing?
    Thanks

    Thanks for your help. This one really has me baffled
    As you can see below the static DNS is set to 3 adddresses for Open DNS and everthing works fine.untill either the computer goes to sllep or is shut down. Then the router can no longer locate a DNS server. The only way I can find to get everything working again is to zero out the address for Open DNS and reboot the router which somehow reestablises the DNS servers as:
    DNS Servers . . . . . . . . . 156.154.119.11
                                           156.154.129.11
                                           192.168.1.1
    You can also this below and I hope you have some idea of what is happening. I never had this problem before with any other routers on this system.
    Thanks,
    Chick
    C:\Windows\system32>ipconfig /all
    Windows IP Configuration
       Host Name . . . . . . . . . . . . : Dominator
       Primary Dns Suffix  . . . . . . . :
       Node Type . . . . . . . . . . . . : Hybrid
       IP Routing Enabled. . . . . . . . : No
       WINS Proxy Enabled. . . . . . . . : No
    Ethernet adapter Local Area Connection 3:
       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : TAP-Win32 Adapter V9
       Physical Address. . . . . . . . . : 00-FF-8F-A2-D9-9F
       DHCP Enabled. . . . . . . . . . . : Yes
       Autoconfiguration Enabled . . . . : Yes
    Ethernet adapter Local Area Connection 2:
       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : NVIDIA nForce 10/100/1000 Mbps Ethernet #
    2
       Physical Address. . . . . . . . . : 00-04-4B-14-AE-3F
       DHCP Enabled. . . . . . . . . . . : Yes
       Autoconfiguration Enabled . . . . : Yes
       Link-local IPv6 Address . . . . . : fe80::6d9a:9c78:1a19:fbfa%19(Preferred)
       IPv4 Address. . . . . . . . . . . : 192.168.1.133(Preferred)
       Subnet Mask . . . . . . . . . . . : 255.255.255.0
       Lease Obtained. . . . . . . . . . : Saturday, September 24, 2011 2:57:14 PM
       Lease Expires . . . . . . . . . . : Sunday, September 25, 2011 3:07:26 PM
       Default Gateway . . . . . . . . . : 192.168.1.1
       DHCP Server . . . . . . . . . . . : 192.168.1.1
       DHCPv6 IAID . . . . . . . . . . . : 469763147
       DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-12-75-07-8A-00-04-4B-14-AE-3F
       DNS Servers . . . . . . . : 208.67.222.222
                                           208.67.220.220
                                           208.67.220.222
       NetBIOS over Tcpip. . . . . . . . : Enabled
    Tunnel adapter isatap.{13320496-B6EC-4CA2-9952-BDB3B51EED80}:
       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : Microsoft ISATAP Adapter
       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
       DHCP Enabled. . . . . . . . . . . : No
       Autoconfiguration Enabled . . . . : Yes
    Tunnel adapter Local Area Connection* 12:
       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
       DHCP Enabled. . . . . . . . . . . : No
       Autoconfiguration Enabled . . . . : Yes
    Tunnel adapter isatap.{8FA2D99F-77B6-4DB6-9F88-C9952D1BE3EF}:
       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
       DHCP Enabled. . . . . . . . . . . : No
       Autoconfiguration Enabled . . . . : Yes
    C:\Windows\system32>
    After Zeroing out Static DNS from Open DNS Address I get:
    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.
    C:\Windows\system32>ipconfig /all
    Windows IP Configuration
       Host Name . . . . . . . . . . . . : Dominator
       Primary Dns Suffix  . . . . . . . :
       Node Type . . . . . . . . . . . . : Hybrid
       IP Routing Enabled. . . . . . . . : No
       WINS Proxy Enabled. . . . . . . . : No
    Ethernet adapter Local Area Connection 2:
       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : NVIDIA nForce 10/100/1000 Mbps Ethernet #
    2
       Physical Address. . . . . . . . . : 00-04-4B-14-AE-3F
       DHCP Enabled. . . . . . . . . . . : Yes
       Autoconfiguration Enabled . . . . : Yes
       Link-local IPv6 Address . . . . . : fe80::6d9a:9c78:1a19:fbfa%19(Preferred)
       IPv4 Address. . . . . . . . . . . : 192.168.1.133(Preferred)
       Subnet Mask . . . . . . . . . . . : 255.255.255.0
       Lease Obtained. . . . . . . . . . : Saturday, September 24, 2011 3:38:12 PM
       Lease Expires . . . . . . . . . . : Sunday, September 25, 2011 3:38:12 PM
       Default Gateway . . . . . . . . . : fe80::c2c1:c0ff:fe7b:a655%19
                                           192.168.1.1
       DHCP Server . . . . . . . . . . . : 192.168.1.1
       DHCPv6 IAID . . . . . . . . . . . : 469763147
       DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-12-75-07-8A-00-04-4B-14-AE-3F
       DNS Servers . . . . . . . . . . . : 156.154.119.11
                                           156.154.129.11
                                           192.168.1.1
       NetBIOS over Tcpip. . . . . . . . : Enabled
    Tunnel adapter Local Area Connection* 12:
       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
       DHCP Enabled. . . . . . . . . . . : No
       Autoconfiguration Enabled . . . . : Yes
       IPv6 Address. . . . . . . . . . . : 2001:0:4137:9e76:3451:dea:3f57:fe7a(Prefe
    rred)
       Link-local IPv6 Address . . . . . : fe80::3451:dea:3f57:fe7a%10(Preferred)
       Default Gateway . . . . . . . . . : ::
       NetBIOS over Tcpip. . . . . . . . : Disabled
    Tunnel adapter isatap.{13320496-B6EC-4CA2-9952-BDB3B51EED80}:
       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
       DHCP Enabled. . . . . . . . . . . : No
       Autoconfiguration Enabled . . . . : Yes
    C:\Windows\system32>

Maybe you are looking for