Unkown ip-address in LAN

Posted on 2012-08-31
Last Modified: 2012-08-31
We have since more than a week have had a very slow internet connection. I have then looked at the traffic through our gateway (windows server 2008, 2 NIC (Internal & External),Forefront) by using wireshark and discovered that a lot of traffic is originating from a specific source IP-adress (protocol mainly TCP). When I try to ping this IP I do not get any answer. In the LAN DNS there is no entry with that IP. How can the source be an IP which does not exist?
Question by:AndHof
    LVL 11

    Accepted Solution


    Someone is connected the personal device by using WiFi.
    You will have to change your WiFi password.
    Secure your wireless network by using MAC access control list.
    Also check the firewall.

    Tushar Kaskhedikar
    LVL 38

    Expert Comment

    The end point has a system state firewall that drops ICMP echo (ping) traffic. System state means if the node didn't initiate the traffic, it will not except (meaning drop) the traffic.

    The node exists if your LAN scanner shows it as passing traffic. Now, you got to find out what node it is.

    Try these:

    Ping -a (IP address)
    NBTSTAT -c (IP address)
    NBTSTAT -a (IP address)

    See if this gives you information that was broadcast to the DNS server or Netbios Name server.

    If not, try and map a drive to it, or remote manage it by IP. See if you can use admin shares to see what's on the hard drive. ALSO, type in the IP as a web site to go to in a browser. This could be a router or printer or storage device with built in Web page.

    Furthermore. If you ask me (this sounds like a rogue router).. Use (on your DC) DHCPloc.exe to see if it's Offering DHCP leases. A rogue router will most often provide DHCP address and it will jack your internet/domain up with performance issues.

    Author Comment

    This was a good answer and I will accept the answer as a solution. However, this was not the problem. We do not have WiFi but your annwer get me thinking in the right direction. The problem is that I'm too stupid. I'm connected to the my office LAN via VPN from home. The IP-address I see is my own VPN-connection. I'm sorry for this.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Highfive + Dolby Voice = No More Audio Complaints!

    Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

    Downtime reduced, data recovered by utilizing an Experts Exchange Business Account Challenge The United States Marine Corps employs more than 200,000 active-duty Marines with operations in four continents, all requiring complex networking system…
    Trying to figure out group policy inheritance and which settings apply where can be a chore.  Here's a very simple summary I've written which might help.  Keep in mind, this is just a high-level conceptual overview where I try to avoid getting bogge…
    Hi everyone! This is Experts Exchange customer support.  This quick video will show you how to change your primary email address.  If you have any questions, then please Write a Comment below!
    Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now