• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 202
  • Last Modified:

How can I stop/locate specific internal IP addresses?

Hello,

I used the DHCP utility on my firewall to determine that a .35 and .105 are downloading a lot, maybe a virus or maybe yahoo launch or something.  I would like to find those computers in our network, but unfortunately when I do a DNS lookup on our DNS server those addresses are not listed.  .100 and higher is for DHCP, while under .99 is static (so that should be easier to find, right?).  Is there a way to block specific IP addresses from doing anything, or way to locate them or what they are doing? (tools, etc).

Thanks,
Robbie
0
youthworks
Asked:
youthworks
2 Solutions
 
rich255Commented:
You should be able to use your firewall rules to block all access to/from those IP's... believe me, the users on those machines will contact you soon!  What kind of firewall do you use?  Be careful with the static address though, it could be an important server or other device.
0
 
mcsweenSr. Network AdministratorCommented:
Try this, it can scan those IPs and give you back info on the computer including the name.  This may help you find your offenders.

http://www.networkview.com/


On a MS Network it's a good idea to run MS DHCP service instead of using your firewall for DHCP.  With DDNS enabled on the DHCP server, DNS will be registered by the DHCP server when it hands out an address instead of relying on all clients to update themselves in DNS.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now