i use 3Com router code 3CRWDR101A-75 Software version 1.12.04.A (10 Sep 2010 17:19:34)
the router has 4 ports and a wifi ,i use 2 ports for 2 mikrotik servers and the wifi for a belkin with ddwrt firmware and an LG smart TV
now forget all that and focus
there is a weird IP that doesn’t belong to any device on my network and it is 192.168.15.1
every time i type that ip in my browser i get a webfig control panel for a mikrotik v6.5
i can ping that ip with amazing low ping and not able to find its mac address !
i tried to block that ip on both mikrotik but no rule was able to block it
i did /tool mac-scan and nothing there
i added that ip to be blocked in the bridge filters of both mikrotik versions and nothing happend
finally i disconnected everything and connected with a tablet to my 3com wifi then opened my browser and typed that ip…boom it is there!
i opened my 3com GUI then went to the wlan device list but nothing there except my tablet !!
i have my router on wpa/wpa2 mixed mode …i changed it to wpa2 only and still that ip there !!!
i activated my router logs to detect any problem and found this …
UDP Loop from xxx.xxx.xxx.xxx to xxx.xxx.xxx.xxx where x is some numbers
and some syn attacks
who is this ip ??
RouterOS v6.5
You have connected to a router. Administrative access only. If this device is not in your possession, please contact your local network administrator.
check this out guys
i ran a traceroute from my 3com router’s GUI and recieved this
Tracing route to 192.168.15.1:33435
over a maximum of 30 hops, waiting timeout 5000 ms:
1 100 ms 100 ms 100 ms 163.121.170.34
2 * * * Request timed out.
3 * * * Request timed out.
4 100 ms 100 ms 100 ms 10.37.243.185
5 100 ms 100 ms 100 ms 10.37.241.78
6 100 ms 100 ms 100 ms 10.35.2.62
7 100 ms 100 ms 100 ms 192.168.15.1
Trace complete.
Hi,
Check if your PC’s LAN / WiFi has alterntive IP statically configured ?
my router ip range is 100.0.0.0/24
this ip 192.168.15.1 is over a maximum of 30 hops it means it is not on my network !
did i mention that my public ip starts with 41.xx.xx.xx and i use opendns ips for dns which are
Primary DNS 208.67.222.222
Secondary DNS 208.67.220.220
i checked the router log
100.0.0.2/100.0.0.3 are both my mikrotik servers on LAN ports
Security Log
2014.06.12 17:57:15 TCP FIN Scan 173.194.119.63, 443->> 100.0.0.2, 49596 (from PPPoE1 Inbound)
2014.06.12 17:57:15 TCP FIN Scan 190.93.247.78, 80->> 100.0.0.2, 49601 (from PPPoE1 Inbound)
2014.06.12 17:57:15 TCP FIN Scan 74.125.230.88, 443->> 100.0.0.2, 49599 (from PPPoE1 Inbound)
2014.06.12 12:18:42 TCP FIN Scan 100.0.0.3, 52338->> 38.99.79.104, 80 (from PPPoE1 Outbound)
2014.06.12 12:18:42 TCP FIN Scan 100.0.0.3, 48056->> 93.184.220.29, 80 (from PPPoE1 Outbound)
2014.06.12 12:18:42 TCP FIN Scan 100.0.0.3, 52305->> 38.99.79.102, 80 (from PPPoE1 Outbound)
2014.06.12 12:17:56 TCP FIN Scan 74.125.239.97, 443->> 100.0.0.3, 52254 (from PPPoE1 Inbound)
2014.06.12 12:17:56 TCP FIN Scan 64.233.160.94, 80->> 100.0.0.3, 52168 (from PPPoE1 Inbound)
2014.06.12 12:17:56 TCP FIN Scan 74.125.230.103, 443->> 100.0.0.3, 52257 (from PPPoE1 Inbound)
2014.06.12 12:17:56 TCP FIN Scan 173.194.41.100, 80->> 100.0.0.3, 52231 (from PPPoE1 Inbound)
this is what i get when i type 192.168.15.1 in any web browser
i see no experts talking about this issue
comon guys 
This is not an issue, you discover the hot water.
Are you kidding???
tracert 127.0.0.1
Traccia instradamento verso 127.0.0.1
su un massimo di 30 punti di passaggio: <<< over a maximum of 30 hops
1 <1 ms <1 ms <1 ms 127.0.0.1
Traccia completata.
My computer are 30 hops away from itself?
That ip is only one of the router your ISP use to give you Internet.
And your ISP use MikroTik devices.
LOL
i knew it
i wanted to hear it from an expert “Guru” to connect the dots
i just wonder now if they use the CALEA package
ho ho ho
did my isp bought hundreds of licenses of the mikrotik v6.5 from you guys ?!
Probably if you are on USA yes, on the 27 country of United Europe is a crime collect detailed data about the use of intetrnet.
(except the classic log 1.2.3.4:5678 UDP → 8.8.8.8:53 UDP 2014/08/01 01:19:23 +02:00 CEST)
This is user forum, we can not provide that info, contact directly MikroTik…
you talk well…you are o.k.
can you provide me a direct link for that ?
