network performance issue - unexplained IP address

We are having an on-gong issue on the network with the email server being blacklisted, and we are looking to try to identify the cause, the suspect being some kind of botnet.

On looking at the network using a protocol analyzer (Colasoft Capsa) the second highest usage in the network comes from an IP address of which I feel is part of the problem.

Any ideas anyone?
Who is Participating?
JohnConnect With a Mentor Business Consultant (Owner)Commented:
That IP address is coming from within a range controlled by:

CacheNetworks, Inc.
209 W Jackson Blvd
Suite 700
United States

DNS Services

I suggest you call / email them about the address in question and see if they can assist you. If they have a rogue computer, they should take it down.

.... Thinkpads_User
grwallaceAuthor Commented:
Thanks for that - I have emailed them and will keep you posted.

In the mean time we are going to try to block it using the firewall
JohnBusiness Consultant (Owner)Commented:
Sounds good and please post back when you know.

.... Thinkpads_User
Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Tony GiangrecoConnect With a Mentor Commented:
I've had the same problem with client networks. I suggest checking your logs to see if there is any activity of NDR's or other notifications related to this situation. Send all that info to them after speaking with them on the phone. Email does not always work in the time you expect it to.
Craig BeckConnect With a Mentor Commented:
Lots of dodgy stuff hosted at that IP address...

I'd just block it at your firewall and forget about it.
grwallaceAuthor Commented:
THanks guys - I have blocked it at the firewall
JohnBusiness Consultant (Owner)Commented:
@grwallace - Thanks, and I was happy to help you with this.

... Thinkpads_User
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.