Computing.Net > Forums > Windows 2000 > mystery IP Address

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

mystery IP Address

Reply to Message Icon

Name: goofylocks
Date: December 17, 2006 at 20:00:56 Pacific
OS: Windows 2000 server
CPU/Ram: 752
Comment:

Hi There,
I am auditing a server and have found a weird issue?!?! if that's what it is.
I've never seen this before, but here goes.

I've noticed 2 ip addresses on a win2k std server however I can only find information on 1 IP address.

There are 2 nics on the server, 1 is enabled the other disabled. The disabled nic was set for dhcp. The enabled server has a single ip address assigned.

When I run ipconfig /all it shows 2 ip addresses, if I run route print it shows 2 routes, according to ipconfig settings. I can't find the 2nd IP anywhere on the server. I've even gone through the registry and the only indication is a pointer to an internal web address that no longer exists.

I'm not sure what to do as I'd like run ipconfig /flushdns but I don't know if that'll cause any issues.

Has anyone seen this before. In 9 years of IT I've never seen this occur?

I'm not seeing things as I've had another techie look at it.

Your advise would be much appreciated.

Cheers,
Jim



Sponsored Link
Ads by Google

Response Number 1
Name: wanderer
Date: December 18, 2006 at 09:14:41 Pacific
Reply:

Is it a 169.168.x.x ip number?

Give a person a fish, they eat for a day. Suggest they internet search and they learn a skill for a lifetime.


0

Response Number 2
Name: goofylocks
Date: December 18, 2006 at 15:19:27 Pacific
Reply:

No, the current IP address that I can find is 10.21.80.10 and the one I'm trying to find info on is 10.21.80.20.

Any idea's?


0

Response Number 3
Name: yellowbelt
Date: December 19, 2006 at 00:11:48 Pacific
Reply:

I'm not a network specialist, however I use ID Serve program to look up IP addresses. You can get it here GRC's free stuff

We can't solve problems by using the same kind of
thinking we used when we created them.
-Albert Einstein 1879-1955


0

Response Number 4
Name: goofylocks
Date: December 19, 2006 at 00:49:27 Pacific
Reply:

Hi There,
Thanks for your reply but this wont be able to tell me which device on a server is utilizing the ip address I'm after.

Thanks anyway, anyone out there have more suggestions?

I've already used some software and hardware auditing tools such as sysinfo, siw, hp insight manager, some vb scripts, etc...

Cheers,
Jim


0

Response Number 5
Name: haroldw
Date: December 19, 2006 at 06:38:24 Pacific
Reply:

Goofylocks:

Have you checked the IP address range of your DHCP server to see if 10.21.80.20 is in that range? Is there any chance that there might be two active DHCP servers on the network? Have you tried an nslookup on the IP? Can you successfully ping the IP address (from the server, and from other systems on the network)?


0

Related Posts

See More



Response Number 6
Name: wanderer
Date: December 19, 2006 at 08:24:42 Pacific
Reply:

On the single nic did you check the alternate ip page to see if this ip is there?

Give a person a fish, they eat for a day. Suggest they internet search and they learn a skill for a lifetime.


0

Response Number 7
Name: wanderer
Date: December 19, 2006 at 08:25:42 Pacific
Reply:

Oh and no vmware or other virtual software running?

Give a person a fish, they eat for a day. Suggest they internet search and they learn a skill for a lifetime.


0

Response Number 8
Name: goofylocks
Date: December 19, 2006 at 17:30:40 Pacific
Reply:

Hi all,
I've checked all of these options prior to putting up this question. I've done all and more and I'm really stumped on this.

It's really weird. I've pinged, nslookup, checked for secondary IP's on the nic's tcp settings, checked on IIS on the default website, I've used some network intrusion tools and it pings but still I can't find the device that is setting this IP address locally on the server. There's no way the a VMware server(using DHCP) or a DHCP server could provide this IP address considering I'm not using DHCP on any local nics.

So as you can see I've extended all attempts so if anyone has any more advise or attempts, I would be most appreciative.

Regards,
Jim.


0

Response Number 9
Name: wanderer
Date: December 20, 2006 at 12:44:53 Pacific
Reply:

if you do a nbtstat -A ipaddress does the server come back a2 the host?

you seem stuck on dhcp. I would ignore that in the troubleshooting if you aren't running a dhcp server.

Are you running any kind of virtualization? For example lets say you have host server x at .25 but you are also running vmware and have another server OS running on vmware. It also will have a ip address but different than the server. So in this case you have a single hardware device with two servers each running on its own ip address.

Could this be happening?


Give a person a fish, they eat for a day. Suggest they internet search and they learn a skill for a lifetime.


0

Response Number 10
Name: wanderer
Date: December 21, 2006 at 08:13:57 Pacific
Reply:

Here's a thought; configure a pc for that mystery ip address and you should get a conflict message with the mac address listed. Track down the mac address

Give a person a fish, they eat for a day. Suggest they internet search and they learn a skill for a lifetime.


0

Response Number 11
Name: seawatch
Date: December 25, 2006 at 16:01:44 Pacific
Reply:

Cool tip wanderer.

Waiting to see what happens with this one.

Larry

Today seems like a good day to chew through the restraints.


0

Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows 2000 Forum Home


Sponsored links

Ads by Google


Results for: mystery IP Address

Static IP address in DHCP?? www.computing.net/answers/windows-2000/static-ip-address-in-dhcp/63064.html

Internet w/ IP address but not name www.computing.net/answers/windows-2000/internet-w-ip-address-but-not-name/49928.html

win2k pro ip addresses www.computing.net/answers/windows-2000/win2k-pro-ip-addresses/39577.html