IT Mystery – Rogue Hide IP on our network! [ip address] [mystery]

Q: Ok so we have this on our network, we can ping, but it is not one of our usual applications (VNC, AVG, etc). The device uses the same name on the network as one of our regular computers and no errors are thrown when PC connects.

What else can we do to identify what this is?

Edit: And I know there is no connection via our wireless connection, I have a handicap of the WAP and was still able to ping the address.


Re:I don't think it is a PC on the network since it doesn't have our antivirus or vnc client installed. It could be some printer or print server, but not sure.

Re:How are you dishing out IP addys?
You could set a rule and give it an invalid Gateway, DNS ect until the network admin shows up.

Re:Bleh I don't have the creds for the switches and the net admin just left.

I won't be able to sleep tonight!


Re:Spidey07 said it best, shut it down and wait for somebody to come crying. It has never failed to find out who it is for me.

Re:get the mac address from arp tables (arp -g on a host) or show ip arp x.x.x.x on a router

track down mac address in switch by looking at the mac or forwarding tables to find the port.

shut down port.


Related posts

Leave a comment

0 Comments.

Leave a Reply


click to changeSecurity Code

[ Ctrl + Enter ]