Hey thanks und3rtak3r for at least taking a stab at it. It's actually called Integrated Lights Out Mgmt - very cool feature. We don't have a dhcp or dns server onsite. All static IPs and no internet access. Closed system. We did think maybe arp cache or something leftover from an old windows box which may have had that IP Address at one time. Dunno. Thing is, the box in question is the most important box on our network - the main database. Hundreds connect to it every day - imagine getting can't connect messages because of a TeamViewer error. So yeah we are very concerned right now. Thank God it hasn't shown itself since that night, but we are monitoring that IP to see if anyone can't connect. Everyone is very puzzled to say the least, which is why I posted it here. But again, thanks guy. I always appreciate it when someone takes the time to reply.