[H] Tracking possible rogue DNS?

[lopaka polena]

I have multiple devices coming from a 193.27.228.0 range showing up on a
192.168.1.0 network. How can I find the rogue device easily? I can ping the
devices but because they are in a different range I don't get any info from
arp.

lopaka