How can I stop/locate specific internal IP addresses?

Posted on 2006-05-03
Medium Priority
Last Modified: 2010-03-18

I used the DHCP utility on my firewall to determine that a .35 and .105 are downloading a lot, maybe a virus or maybe yahoo launch or something.  I would like to find those computers in our network, but unfortunately when I do a DNS lookup on our DNS server those addresses are not listed.  .100 and higher is for DHCP, while under .99 is static (so that should be easier to find, right?).  Is there a way to block specific IP addresses from doing anything, or way to locate them or what they are doing? (tools, etc).

Question by:youthworks

Accepted Solution

rich255 earned 195 total points
ID: 16598826
You should be able to use your firewall rules to block all access to/from those IP's... believe me, the users on those machines will contact you soon!  What kind of firewall do you use?  Be careful with the static address though, it could be an important server or other device.
LVL 22

Assisted Solution

mcsween earned 180 total points
ID: 16600431
Try this, it can scan those IPs and give you back info on the computer including the name.  This may help you find your offenders.


On a MS Network it's a good idea to run MS DHCP service instead of using your firewall for DHCP.  With DDNS enabled on the DHCP server, DNS will be registered by the DHCP server when it hands out an address instead of relying on all clients to update themselves in DNS.

Featured Post


Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many of us in IT utilize a combination of roaming profiles and folder redirection to ensure user information carries over from one workstation to another; in my environment, it was to enable virtualization without needing a separate desktop for each…
We recently endured a series of broadcast storms that caused our ISP to shut us down for brief periods of time. After going through a multitude of tests, we determined that the issue was related to Intel NIC drivers on some new HP desktop computers …
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
Whether it be Exchange Server Crash Issues, Dirty Shutdown Errors or Failed to mount error, Stellar Phoenix Mailbox Exchange Recovery has always got your back. With the help of its easy to understand user interface and 3 simple steps recovery proced…
Suggested Courses

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question