How to identify a rogue IP in the network
Hi guys,
I have detected an unknown IP within the range of 10.119.8.8 which is an un-used segment in our network structure. The host is not ping-able anymore and traceroute has no reply after a few hops. What are the ways of me identifying the location of this IP?.. and how come a device can be assigned this IP when its not in any of our subnet range?
Software/Hardware used:
Network
Software/Hardware used:
Network
ASKED:
February 4, 2013 12:50 PM
Answer Wiki:
Hi, and welcome to ITKE.
It is easy for any device to have a fixed IP address, just by configuration of the network parameters.
My guess is that someone brought in a device with a fixed IP address, connected it to your network, and that is how you saw this. That device is probably now gone, which is why you can no longer see it. It is also possible that it's IP address has been changed to one that IS within your range, so an audit of all devices connected to the network would be a good precaution.
There are several software applications that can do this for you, some are free to use, search for 'Network Audit software', and you should find something suitable.
To see all answers submitted to the Answer Wiki: View Answer History.
RSS - Discussions Help
Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
