Multiple suspicious IPs w/ no MAC appearing on my network

Multiple suspicious IPs w/ no MAC appearing on my network - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Computers (https://sinister.ly/Forum-Computers)
+--- Forum: Antivirus & Protection (https://sinister.ly/Forum-Antivirus-Protection)
+--- Thread: Multiple suspicious IPs w/ no MAC appearing on my network (/Thread-Multiple-suspicious-IPs-w-no-MAC-appearing-on-my-network)

Pages: 1 2

RE: Multiple suspicious IPs w/ no MAC appearing on my network - xevenofhearts - 07-22-2013

I'd personally use Nmap, like Ex094 said. If you absolutely need a GUI, grab Zenmap, it does the exact same as Nmap. Good luck Smile

RE: Multiple suspicious IPs w/ no MAC appearing on my network - OctopusPopsicles - 07-23-2013

(07-22-2013, 04:45 AM)Akkomodate Wrote: I'd personally use Nmap, like Ex094 said. If you absolutely need a GUI, grab Zenmap, it does the exact same as Nmap. Good luck

When I do the nmap scan of the IP's while they're on my network I'm getting:

Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn

RE: Multiple suspicious IPs w/ no MAC appearing on my network - 1llusion - 07-23-2013

(07-23-2013, 01:58 AM)OctopusPopsicles Wrote:
(07-22-2013, 04:45 AM)Akkomodate Wrote: I'd personally use Nmap, like Ex094 said. If you absolutely need a GUI, grab Zenmap, it does the exact same as Nmap. Good luck

When I do the nmap scan of the IP's while they're on my network I'm getting:

Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn

Try adding the -Pn parameter then Smile

Tell us what was the result, also, please include what options you used when scanning (you can just paste the whole command here), so we can see what you were exactly doing and point you to the right direction Smile

RE: Multiple suspicious IPs w/ no MAC appearing on my network - 1llusion - 07-23-2013

(07-23-2013, 01:58 AM)OctopusPopsicles Wrote:
(07-22-2013, 04:45 AM)Akkomodate Wrote: I'd personally use Nmap, like Ex094 said. If you absolutely need a GUI, grab Zenmap, it does the exact same as Nmap. Good luck

When I do the nmap scan of the IP's while they're on my network I'm getting:

Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn

Try adding the -Pn parameter then Smile

RE: Multiple suspicious IPs w/ no MAC appearing on my network - OctopusPopsicles - 07-23-2013

(07-23-2013, 02:24 AM)1llusion Wrote:
(07-23-2013, 01:58 AM)OctopusPopsicles Wrote:
(07-22-2013, 04:45 AM)Akkomodate Wrote: I'd personally use Nmap, like Ex094 said. If you absolutely need a GUI, grab Zenmap, it does the exact same as Nmap. Good luck

When I do the nmap scan of the IP's while they're on my network I'm getting:

Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn

Try adding the -Pn parameter then
Tell us what was the result, also, please include what options you used when scanning (you can just paste the whole command here), so we can see what you were exactly doing and point you to the right direction

Target: 10.254.#%.*&!
Command:nmap -T4 -A -v -Pn 10.254.AB.CDE

Starting Nmap 6.25 ( http://nmap.org ) at 2013-07-23 09:47 CDT
NSE: Loaded 106 scripts for scanning.
NSE: Script Pre-scanning.
Initiating Parallel DNS resolution of 1 host. at 09:48
Completed Parallel DNS resolution of 1 host. at 09:48, 0.13s elapsed
Initiating SYN Stealth Scan at 09:48
Scanning 10.254.AB.CDE [1000 ports]
SYN Stealth Scan Timing: About 29.25% done; ETC: 09:49 (0:01:15 remaining)
SYN Stealth Scan Timing: About 59.50% done; ETC: 09:49 (0:00:42 remaining)
Completed SYN Stealth Scan at 09:49, 102.17s elapsed (1000 total ports)
Initiating Service scan at 09:49
Initiating OS detection (try #1) against 10.254.AB.CDE
Retrying OS detection (try #2) against 10.254.AB.CDE
NSE: Script scanning 10.254.AB.CDE.
Initiating NSE at 09:49
Completed NSE at 09:49, 0.00s elapsed
Nmap scan report for 10.254.AB.CDE
Host is up.
All 1000 scanned ports on 10.254.40.130 are filtered
Too many fingerprints match this host to give specific OS details

TRACEROUTE
HOP RTT ADDRESS
1 -- 10.254.AB.CDE

NSE: Script Post-scanning.
Read data files from: /usr/local/bin/../share/nmap
OS and Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 109.63 seconds
Raw packets sent: 2048 (94.672KB) | Rcvd: 0 (0B)

RE: Multiple suspicious IPs w/ no MAC appearing on my network - OctopusPopsicles - 07-23-2013

(07-23-2013, 02:24 AM)1llusion Wrote:
(07-23-2013, 01:58 AM)OctopusPopsicles Wrote:
(07-22-2013, 04:45 AM)Akkomodate Wrote: I'd personally use Nmap, like Ex094 said. If you absolutely need a GUI, grab Zenmap, it does the exact same as Nmap. Good luck

When I do the nmap scan of the IP's while they're on my network I'm getting:

Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn

Try adding the -Pn parameter then
Tell us what was the result, also, please include what options you used when scanning (you can just paste the whole command here), so we can see what you were exactly doing and point you to the right direction

RE: Multiple suspicious IPs w/ no MAC appearing on my network - OctopusPopsicles - 07-23-2013

(07-23-2013, 02:24 AM)1llusion Wrote:
(07-23-2013, 01:58 AM)OctopusPopsicles Wrote:
(07-22-2013, 04:45 AM)Akkomodate Wrote: I'd personally use Nmap, like Ex094 said. If you absolutely need a GUI, grab Zenmap, it does the exact same as Nmap. Good luck

When I do the nmap scan of the IP's while they're on my network I'm getting:

Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn

Try adding the -Pn parameter then
Tell us what was the result, also, please include what options you used when scanning (you can just paste the whole command here), so we can see what you were exactly doing and point you to the right direction

RE: Multiple suspicious IPs w/ no MAC appearing on my network - lady_godiva - 07-25-2013

It is very strange, because of the ARP protocol the MAC must be given. You can try to drop the MAC table so that the router will have to learn it again but this might work or not. My advice to make it simple is to disable the guest access as i don't see how that can be useful.