Лог ip адресов в windows

Is there a way to find some type of log file that saves all IP address that were assigned to a desktop?

I changed an static IP of a desktop (switched it to DHCP) of mine and i can not recall what the ip address was. Does windows log what it was anywhere?

asked Sep 14, 2012 at 16:13

StealthRT's user avatar

1

Interesting question…

At the very least, the DHCP server should log all the addresses it hands out, if logging is enabled.

Im looking to see if its logged on the client side anywhere, but Im not seeing anything.

answered Sep 14, 2012 at 16:19

Keltari's user avatar

KeltariKeltari

72k26 gold badges179 silver badges229 bronze badges

2

The Windows DHCP Client service can log this, if you have the Operational log enabled. Some say it is enabled by default, but my limited testing shows otherwise.

This won’t help you in the past but it can going forward.

You can enable it in Event Viewer -> Applications and Services -> Microsoft -> Windows -> DHCP Client and enable the Operational log.

After enabling the log «Event viewer —> windows system logs —>filter current log» and choose «dhcp-client» under Event Sources.

Filter dialog, source choosing

matt wilkie's user avatar

matt wilkie

5,03523 gold badges58 silver badges85 bronze badges

answered Dec 19, 2014 at 17:13

cde's user avatar

cdecde

1,81613 silver badges22 bronze badges

1

As far as I know there’s no such log. There are entries for the DHCP client in the system logs, but those seem to take errors and failures only (and won’t include manually assigned IPs). What you could try is doing a system restore. If you’re lucky, the last restore point is just hours before (or possibly days) and still has the old configuration.

I’ve found one duplicate question without any clear answer either.

Community's user avatar

answered Sep 14, 2012 at 16:39

Mario's user avatar

MarioMario

4,2662 gold badges22 silver badges22 bronze badges

0

You must log in to answer this question.

Not the answer you’re looking for? Browse other questions tagged

.

Is there a way to find some type of log file that saves all IP address that were assigned to a desktop?

I changed an static IP of a desktop (switched it to DHCP) of mine and i can not recall what the ip address was. Does windows log what it was anywhere?

asked Sep 14, 2012 at 16:13

StealthRT's user avatar

1

Interesting question…

At the very least, the DHCP server should log all the addresses it hands out, if logging is enabled.

Im looking to see if its logged on the client side anywhere, but Im not seeing anything.

answered Sep 14, 2012 at 16:19

Keltari's user avatar

KeltariKeltari

72k26 gold badges179 silver badges229 bronze badges

2

The Windows DHCP Client service can log this, if you have the Operational log enabled. Some say it is enabled by default, but my limited testing shows otherwise.

This won’t help you in the past but it can going forward.

You can enable it in Event Viewer -> Applications and Services -> Microsoft -> Windows -> DHCP Client and enable the Operational log.

After enabling the log «Event viewer —> windows system logs —>filter current log» and choose «dhcp-client» under Event Sources.

Filter dialog, source choosing

matt wilkie's user avatar

matt wilkie

5,03523 gold badges58 silver badges85 bronze badges

answered Dec 19, 2014 at 17:13

cde's user avatar

cdecde

1,81613 silver badges22 bronze badges

1

As far as I know there’s no such log. There are entries for the DHCP client in the system logs, but those seem to take errors and failures only (and won’t include manually assigned IPs). What you could try is doing a system restore. If you’re lucky, the last restore point is just hours before (or possibly days) and still has the old configuration.

I’ve found one duplicate question without any clear answer either.

Community's user avatar

answered Sep 14, 2012 at 16:39

Mario's user avatar

MarioMario

4,2662 gold badges22 silver badges22 bronze badges

0

You must log in to answer this question.

Not the answer you’re looking for? Browse other questions tagged

.

check
Best Answer

  • You can view the DHCP client logs, but by default the level of detail you’re looking for is disabled.

    You’ll need to enable the DHCP Client Events/Operational log in order to capture this information.

    Once you do, you’ll see lots of DHCP events, the ones you want should have event ID 50013.


    1 found this helpful
    thumb_up
    thumb_down

  • View Best Answer in replies below

    8 Replies

    • Event viewer —> windows system logs —>filter current log —> choose dhcp-client


      1 of 2 found this helpful
      thumb_up
      thumb_down

    • * Under event sources


      Was this post helpful?
      thumb_up
      thumb_down

    • You can view the DHCP client logs, but by default the level of detail you’re looking for is disabled.

      You’ll need to enable the DHCP Client Events/Operational log in order to capture this information.

      Once you do, you’ll see lots of DHCP events, the ones you want should have event ID 50013.


      1 found this helpful
      thumb_up
      thumb_down

    • Create a logon script placed for everyone in their startup folder that gets the IP address and logs it in a text file?

      I think there has to be a corresponding Even tthough too, but I don’t know what to look for.


      Was this post helpful?
      thumb_up
      thumb_down

    • Obviously, enabling logging will only help going forward. If you’re trying to identify what happened in the past, you won’t have anything to review.


      Was this post helpful?
      thumb_up
      thumb_down

    • Should be logged by default on windows 7 clients. It has always shown when I pulled up the system logs.


      Was this post helpful?
      thumb_up
      thumb_down

    • Author Alan

      Thanks for the replies!  

      I did find that I needed to enable the DHCP Client Events/Operational log in order to capture this information.  This is located in the «Applications and Services Logs» section of Event Viewer.


      Was this post helpful?
      thumb_up
      thumb_down

    Table of Contents

    • Operating system
    • Scenario
    • Solution

    Operating system

    Windows 2008 Server/ Windows 7

    Scenario

    After replacing the motherboard, need to assign old IP configurations But unfortunately, customer is not aware of previous IP address details.

    Solution

    In this case, using registry we can find out previous IP address details. Windows Registry path should be specified below:

    Open the registry editor and locate the interfaces path.

    Current and previous IP address details will list under:

    “HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Prameters\Interfaces”

    There is a chance of multiple interfaces when we installed VMware or any other related applications.

    Шаг 1: Откройте командную строку.
    Нажмите клавиши «Win + R», чтобы открыть диалоговое окно «Выполнить», введите «cmd» и нажмите клавишу «Enter».

    Шаг 2: Введите команду «ipconfig».
    В командной строке введите «ipconfig» и нажмите клавишу «Enter». Будет показана информация о сетевых подключениях компьютера.

    Шаг 3: Обратите внимание на адрес IPv4.
    Найдите сетевое подключение, для которого хотите узнать историю IP-адресов, и обратите внимание на адрес IPv4. Это текущий IP-адрес компьютера.

    Шаг 4: Введите команду «arp — a».
    Введите команду «arp — a» и нажмите клавишу «Enter». Будут отображены все IP-адреса, которые были связаны с вашим компьютером.

    Шаг 5: Просмотрите историю IP-адресов.
    Используя список адресов, найдите те, которые вам нужны, и определите их временные метки. Это позволит вам просматривать историю IP-адресов, связанных с вашим компьютером.

    Полезные советы:
    — Если вы хотите узнать историю IP-адресов WiFi-соединения, используйте команду «netsh wlan show profile».
    — Если вы хотите узнать IP-адрес сайта, откройте командную строку и введите «ping example. com». В результате будет показан IP-адрес сайта.
    — Используйте данную информацию только с разрешения владельца компьютера.

  • Локальный порт отказано в доступе windows 10
  • Локальная сеть windows server 2008
  • Локальные политики безопасности windows server 2008
  • Лишние файлы в папке windows 10
  • Логи удаления файлов windows 10