RE: Hacker on Internal Net: DHCP

RE: Hacker on Internal Net: DHCP

Secure Home | Search | About
 Computer Software Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
RE: Hacker on Internal Net: DHCP JimR17 05-11-2008
Posted by JimR17 on May 11, 2008, 10:06 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I just noticed a rogue DHCP lease on my network and began searching
for the MAC address and found the post below from 22 Mar 2005. I also
found an explanation for the behavior on Microsoft's website:
http://support.microsoft.com/kb/945948/en-us

------- 2005 post from Ivyhu...@gmail.com -------
I'm noticing this same thing on my network since recently adding M$
Windows Server 2003 in our network... I've been searching the net
high
and low for a reason why these DHCP leases are made and have found
nothing. Is there any new info I'm missing?

Here's the bogus MAC's I'm seeingin our DHCP lease reports:

MACHINE | IP | MAC | LEASE BEGIN | LEASE
END
detective 192.168.0.119 45:3b:13:0d:89:0a 14:47:45 02/23/2005 14:48:45
02/23/2005
detective 192.168.0.117 e9:eb:b3:a6:db:3c 14:47:29 02/23/2005 14:48:29
02/23/2005
detective 192.168.0.118 4d:c8:43:bb:8b:a6 14:47:37 02/23/2005 14:48:37
02/23/2005

WTF?? I hate M$!!!!! Any reason for why my logs are getting spammed
would be appreciated. When we do a company security audit, I'd prefer
not to answer "uhh I dunno".

-Scott
------- End Prior Post -------

Similar ThreadsPosted
FTP hacker September 18, 2006, 6:59 pm
Hacker fears 'UFO cover-up' May 6, 2006, 12:17 pm
Certified Ethical Hacker, CHFI, LPT, ECSA November 7, 2006, 1:30 pm
HACKER FOUND GUILTY IN MASSIVE DATA THEFT CASE August 18, 2005, 1:00 pm
Do I block access from svchost to DHCP? June 14, 2005, 6:32 pm
When I log on I get a message that says windows ce networking: Your ip address lease has expired by dhcp July 13, 2007, 7:44 am

The site map in XML format XML site map

Contact Us | Privacy Policy