Page 1 of 1

[SOLVED] strange ip range

Posted: Sun Nov 25, 2012 10:37 pm
by remo85
My nightmare,,,these ip`s is my biggest problem in life now.,,did anyone see like that before?

strange ip range

Posted: Sun Nov 25, 2012 11:17 pm
by cbrown
What do you mean? What is the problem?

Re: strange ip range

Posted: Sun Nov 25, 2012 11:28 pm
by remo85
The problem is these ip`s are not in my range,,they are stuck somehow in clients routers,and when they connect to the network they generate huge traffic over the specific ap they are connected with,,i tried to stop them with no result,,i can`t see the ips anywhere but in mikrotik like you see.notice that they refer to a DNS also,,which is real.

Re: strange ip range

Posted: Mon Nov 26, 2012 12:17 am
by Ivoshiee
It is probably just a device down with some IP-address generating virus. Just throw them out of your network and ask them to fix it before let back in.

Re: strange ip range

Posted: Mon Nov 26, 2012 10:44 am
by remo85
We tried once to disconnect all the clients after we disconnected them one by one with no result,,i found that these ip`s come from the internet with range 1.0.0.0/8 i blocked them via juniper SSG5 but they kept stuck with clients,,i bought new router and connected to it to the mikrotik and it gave the same!!!!! im trying to rebuild all routers including mikrotik today hoping it will work,,the truth is that i really can`t understand what is going on,posted this hoping some is familiar to it!!!

Thank You.

Re: strange ip range

Posted: Tue Nov 27, 2012 1:52 am
by Ivoshiee
Look at the MAC address. Is it truly at the WAN side?

Re: [SOLVED] strange ip range

Posted: Tue Nov 27, 2012 2:39 pm
by remo85
We found that an attack with DDNS affected our network,,we stopped it from the public side,,these ip`s were stuck with TP-LINK 740N routers,,we tried to reset and upgrade it with no result,,finally we changed all firmware with DD-WRT one,,its stronger with more firewall and security options,,it stopped. thank god.

Thank You so much