We have had a problem the last couple of days here at work. We have a pretty average size LAN with about 5 switches on each floor(3 floors). We have 7 servers and a bunch of printers. About 150 users in the building. We noticed that 3 of our switches "stole" 3 of our users static IP addresses. We dont know how. DHCP is disabled on all servers as we do not use it. Everything is static here. Today one of our printers using a jet direct card had "stolen" another IP address. This printer is not set up to use an IP just MAC address. All of this just started to happen one day this week. It's the strangest thing. We have not found any viruses. We are pretty sure there is not a hacker trying to break in. Anyone have any suggestions on what we should be looking for or "who" we should be looking for??? HELP???
Oh also, we reset the switches and switched off the printer and that fixed or released those IP's?? Weird huh??
Oh also, we reset the switches and switched off the printer and that fixed or released those IP's?? Weird huh??