Solved

Strange IP Addresses being picked up

Posted on 2012-03-16
18
379 Views
Last Modified: 2012-03-31
The last few days , a number of our desktops have acquired strange IP addresses , outside our range . They pick up an address in the range 192.168.11.xx . To reset I have to go into CMD and ipconfig /release then ipconfig/renew . Is there any way this can be prevented ?
All help gratefully received .

regards ,
0
Comment
Question by:TomTierney
  • 7
  • 5
  • 4
18 Comments
 
LVL 14

Expert Comment

by:John-Charles-Herzberg
Comment Utility
Have you scanned you network for another DHCP server?

Thanks
JC
0
 
LVL 30

Assisted Solution

by:IanTh
IanTh earned 500 total points
Comment Utility
when it has a 192.168.11.x in the ipconfig get the gateway ip address as thats the device that has the dhcp  server role for 192.168.11.x when you have the gateway that may show you whats going on

as 192.168.x.x is a home ip range I bet somebody has put their home router with dhcp running onto your lan imho
0
 

Author Comment

by:TomTierney
Comment Utility
How can I fix it ??
0
 
LVL 14

Expert Comment

by:John-Charles-Herzberg
Comment Utility
This software might help.

DhcpExplorer allows you to discover DHCP servers on your local subnet or LAN

http://www.softpedia.com/get/Network-Tools/Network-IP-Scanner/DHCPExplorer.shtml
0
 
LVL 14

Expert Comment

by:John-Charles-Herzberg
Comment Utility
0
 
LVL 14

Expert Comment

by:John-Charles-Herzberg
Comment Utility
This video might help if you are OK with using linix to help find the DHCP server(s)

3hacks : Rogue DHCP Server Detection (dhcp_probe)

http://www.youtube.com/watch?v=bc1m4Npoyik

Thanks
JC
0
 

Author Comment

by:TomTierney
Comment Utility
Still got the problem . Downloaded DHcP explorer but that only shows our subnet . I viewed the video but didn't 'get it' . I can see no visible signs of a 'home' address so difficult to remove . I really am struggling with this one . Anyone ?
0
 
LVL 30

Expert Comment

by:IanTh
Comment Utility
can yu ping the rogue ip addres I mean does it actually exist
0
Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

 

Author Comment

by:TomTierney
Comment Utility
I tried pinging one of the addresses I have seen and it just timed out .... 192.168.11.11
0
 

Author Comment

by:TomTierney
Comment Utility
Our RAS server has an address of 192.168.11.14 ?? I don't recall this . Does this sound correct ?
0
 
LVL 30

Expert Comment

by:IanTh
Comment Utility
whats your lan ip address range ? 10.0.0.x or someting
0
 

Author Comment

by:TomTierney
Comment Utility
192.168.16.x
0
 

Accepted Solution

by:
TomTierney earned 0 total points
Comment Utility
Hi , it appears that my problem was caused by a Buffalo router that we have deployed at one of our satellite sites . We spotted this on a tech forum and now , having disabled this equipment , normality has been restored .
Thanks for all the input .

regards ,
0
 

Author Comment

by:TomTierney
Comment Utility
I've requested that this question be closed as follows:

Accepted answer: 0 points for TomTierney's comment #37747205

for the following reason:

It appears to have done the trick . It would appear to be a common occurrence .<br /><br />regards ,
0
 
LVL 30

Expert Comment

by:IanTh
Comment Utility
I would like to point to my second post where I stated

as 192.168.x.x is a home ip range I bet somebody has put their home router with dhcp running onto your lan imho

and your cooment

Hi , it appears that my problem was caused by a Buffalo router that we have deployed at one of our satellite sites . We spotted this on a tech forum and now , having disabled this equipment , normality has been restored

how is that different I stated it was another router and your fix is another router
0
 
LVL 30

Expert Comment

by:IanTh
Comment Utility
thanks
0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Preface There are many applications where some computing systems need have their system clocks running synchronized within a small margin and eventually need to be in sync with the global time. There are different solutions for this, i.e. the W3…
Configuring network clients can be a chore, especially if there are a large number of them or a lot of itinerant users.  DHCP dynamically manages this process, much to the relief of users and administrators alike!
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now