IP spoof detected

Posted on 2007-10-07
Last Modified: 2012-05-05
A few days ago the firewall logs start filling with "IP spoof detected" messages. It's an APIPA address. It's coming from the LAN to the WAN

Any ideas on how to find the faulty machine?

Question by:adrian1976
    LVL 2

    Accepted Solution

    That's the broadcast address for the APIPA subnet. If you can see the source APIPA address from your firewall logs then you could I suppose configure another machine with an APIPA address and try to RDP to the client for example.
    LVL 5

    Assisted Solution

    You can connect a Fluke or any other packet inspector and check the source APIPA address, it will be linked to a MAC Address. From there, you must check your switches and routers' logs to find the desired computer.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
    Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
    Internet Business Fax to Email Made Easy - With eFax Corporate (, you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
    In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…

    730 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now