Find all past desktop IP addresses

8

1

Is there a way to find some type of log file that saves all IP address that were assigned to a desktop?

I changed an static IP of a desktop (switched it to DHCP) of mine and i can not recall what the ip address was. Does windows log what it was anywhere?

StealthRT

Posted 2012-09-14T16:13:07.763

Reputation: 956

Related: How To Find My Previous IP Addresses

– Ƭᴇcʜιᴇ007 – 2012-12-15T18:23:06.983

Answers

2

Interesting question...

At the very least, the DHCP server should log all the addresses it hands out, if logging is enabled.

Im looking to see if its logged on the client side anywhere, but Im not seeing anything.

Keltari

Posted 2012-09-14T16:13:07.763

Reputation: 57 019

1Im actually surprised, there is no indication of leased IP in the event viewer. – Keltari – 2012-09-14T16:34:50.083

Looked around a bit and there are obviously event IDs (mentioned on some forums) but they won't show up in the default views or they're hidden somewhere I didn't check (just had a quick look only). – Mario – 2012-09-14T16:40:53.487

4

The Windows DHCP Client service can log this, if you have the Operational log enabled. Some say it is enabled by default, but my limited testing shows otherwise.

This won't help you in the past but it can going forward.

You can enable it in Event Viewer -> Applications and Services -> Microsoft -> Windows -> DHCP Client and enable the Operational log.

After enabling the log "Event viewer --> windows system logs -->filter current log" and choose "dhcp-client" under Event Sources.

Filter dialog, source choosing

cde

Posted 2012-09-14T16:13:07.763

Reputation: 1 665

After enabling the log "Event viewer --> windows system logs -->filter current log" and choose "dhcp-client" under Event Sources. https://community.spiceworks.com/topic/410377-is-there-a-log-of-ip-addresses-a-windows-dhcp-client-receives

– matt wilkie – 2015-10-26T20:29:17.167

2

As far as I know there's no such log. There are entries for the DHCP client in the system logs, but those seem to take errors and failures only (and won't include manually assigned IPs). What you could try is doing a system restore. If you're lucky, the last restore point is just hours before (or possibly days) and still has the old configuration.

I've found one duplicate question without any clear answer either.

Mario

Posted 2012-09-14T16:13:07.763

Reputation: 3 685