Where to find if IP address is safe ???

Discussion in 'Software' started by akm, Nov 29, 2008.

  1. akm

    akm Sergeant

    'Zonealarm' has blocked IP address, but am using free version so no way to check IP address other than (as far as I know, which is not very far, thus the reason for this post :) ) type it in IE browser url address box and 'browse'.

    Is there a site where we can safely find info about IP addresses ?

    Other suggestions ?
     
    akm, Nov 29, 2008
    #1
  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    TimW, Nov 29, 2008
    #2
  3. akm

    akm Sergeant

    Tim
    Thank you for the reply.
    Any thoughts on below info ?

    Zonealarm blocks with this notice...
    ...blocked internet access (NetBIOS session) from 192.168.1.2 (TCP Port 3429) [TCP Flags:S]

    Tried 'Site Advisor' but they wouldnt take an IP #, put in BLACKHOLE-1.IANA.ORG (from info below) but nothing came up.

    Tried networksolutions (looks pretty official, not sure why ZA blocked it) and got...

    192.168.1.2
    Record Type: IP Address

    OrgName: Internet Assigned Numbers Authority
    OrgID: IANA
    Address: 4676 Admiralty Way, Suite 330
    City: Marina del Rey
    StateProv: CA
    PostalCode: 90292-6695
    Country: US

    NetRange: 192.168.0.0 - 192.168.255.255
    CIDR: 192.168.0.0/16
    NetName: IANA-CBLK1
    NetHandle: NET-192-168-0-0-1
    Parent: NET-192-0-0-0-0
    NetType: IANA Special Use
    NameServer: BLACKHOLE-1.IANA.ORG
    NameServer: BLACKHOLE-2.IANA.ORG
    Comment: This block is reserved for special purposes.
    Comment: Please see RFC 1918 for additional information.
    Comment: http://www.arin.net/reference/rfc/rfc1918.txt
    RegDate: 1994-03-15
    Updated: 2007-11-27

    OrgAbuseHandle: IANA-IP-ARIN
    OrgAbuseName: Internet Corporation for Assigned Names and Number
    OrgAbusePhone: +1-310-301-5820
    OrgAbuseEmail: abuse@iana.org

    OrgTechHandle: IANA-IP-ARIN
    OrgTechName: Internet Corporation for Assigned Names and Number
    OrgTechPhone: +1-310-301-5820
    OrgTechEmail: abuse@iana.org
     
    akm, Nov 29, 2008
    #3
  4. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    That IP address is within your local setup...do you have a router with more than one computer? Do you have any peripheral attachments? Wireless printers, etc.

    Go to start / run / type "cmd" without quotes, when the command prompt opens type:
    ipconfig /all
     
    TimW, Nov 29, 2008
    #4
  5. akm

    akm Sergeant

    There is another PC (my son) using the home wireless router connection at the same time as my PC, but my wife also uses the connection with her MAC at the same time and I dont get that Zonealarm message then.

    Would it help to explain (so I could understand it :) ) if I posted the ipconfig/all results ?
     
    akm, Nov 29, 2008
    #5
  6. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    First it is "ipconfig /all" --> note the space.

    And you should post in the software section as I am certain that the ip address is from your son's computer. Do you have file sharing enabled?

    In either case, this is not malware and you should follow up in software.
     
    TimW, Nov 30, 2008
    #6
  7. akm

    akm Sergeant

    Tim
    Thanks again for the reply and info !
    Do not have file sharing enabled.
    Is there a way for MajorGeeks to just move this discussion to 'Software' or is there a best way for me to do it ?
     
    akm, Nov 30, 2008
    #7
  8. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Moved....:)

    Now if you want to post the ipconfig someone else can reassure you that the ip is within your own system. Any time you set up a router, you by default (with most routers) will have ip addresses assigned to the networked computers that start with:
    192.168.1.xxx
     
    TimW, Nov 30, 2008
    #8
  9. dlb

    dlb MajorGeek

    Tim knows what he's talking about :-D All IP ads with 192.168.x.x are within your local network. 'Local Network' means your router and all the PCs in your home connected to it. If ZoneAlarm is trying to stop another PC in your home from connecting to your PC, this could mean that the PC has a worm/virus that is trying to spread locally, or that you have shared files/folders/drives and ZA wasn't "told" about the shares, or maybe there's a device (like a printer) that the other PC is trying to use. However, I'm no pro with local networks (or ZA) so I could be wrong, but everything Tim said earlier totally applies. Maybe run some malware scans on all the PCs in your local network (or in your house) and be sure that all is clean. If you have a wireless router and haven't enabled a WEP/WPA password, there is a chance that someone is trying to connect to your network via wifi to try to get 'free' internet access. A while back, a friend lived in an apartment complex; his downstairs neighbor had a 10M cable connection; they split the cost of a wireless router and split the cost of the internet bill (downstairs 70%, my friend paid 30%). They left it open (no WPA/WEP) and every so often they'd find someone sitting in their car using the connection.... the moral of the story is: use WPA/WEP protection if you have a wireless router.
     
    dlb, Nov 30, 2008
    #9
  10. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Yes, you need to tell ZA that it is ok. Not malware. Most all firewalls have settings to allow local traffic within the network.
     
    TimW, Nov 30, 2008
    #10
  11. dlb

    dlb MajorGeek

    I tried to add this to my above post, but I waited too long...

    You should post the results of ipconfig /all so that we can get a better picture of what's going on. Be sure to put a space between "ipconfig" and "/all".
    To make things easier, you can type ipconfig /all >c:\ipconfiginfo.txt and you won't see the results, but a text (Notepad) file called "ipconfiginfo" will be written directly to drive C: with the results of the "ipconfig /all" command. Then simply attach the "ipconfiginfo" file to a future post. There's a space between "ipconfig" and "/all" and there's a space between "/all" and the rest of the command.
     
    dlb, Nov 30, 2008
    #11
  12. akm

    akm Sergeant

    Tim, thank you for moving this discussion... and to dlb for the additional info.

    Would like to let my son know if may be a virus problem.

    ipconfiginfo.txt...

    Windows IP Configuration
    Host Name . . . . . . . . . . . . : AKM
    Primary Dns Suffix . . . . . . . :
    Node Type . . . . . . . . . . . . : Broadcast
    IP Routing Enabled. . . . . . . . : No
    WINS Proxy Enabled. . . . . . . . : No
    Ethernet adapter Local Area Connection 2:
    Media State . . . . . . . . . . . : Media disconnected
    Description . . . . . . . . . . . : Broadcom NetXtreme 57xx Gigabit Controller
    Physical Address. . . . . . . . . : 00-1C-23-8F-84-03
    Ethernet adapter Wireless Network Connection 2:
    Connection-specific DNS Suffix . :
    Description . . . . . . . . . . . : Dell Wireless 1505 Draft 802.11n WLAN Mini-Card
    Physical Address. . . . . . . . . : 00-19-7E-B0-35-F1
    Dhcp Enabled. . . . . . . . . . . : Yes
    Autoconfiguration Enabled . . . . : Yes
    IP Address. . . . . . . . . . . . : 192.168.1.3
    Subnet Mask . . . . . . . . . . . : 255.255.255.0
    Default Gateway . . . . . . . . . : 192.168.1.1
    DHCP Server . . . . . . . . . . . : 192.168.1.1
    DNS Servers . . . . . . . . . . . : 192.168.1.1
    Lease Obtained. . . . . . . . . . : Sunday, November 30, 2008 8:46:19 PM
    Lease Expires . . . . . . . . . . : Monday, December 01, 2008 8:46:19 PM
     
    akm, Dec 1, 2008
    #12
  13. plodr

    plodr MajorGeek Super Extraordinaire Moderator Staff Member

    There is no virus problem.
    You are using a router which has the address 192.168.1.1 (default gateway, DHCP and DNS servers)
    Your current computer is given the address 192.168.1.3 (IP address).
    I suspect the router has given the 192.168.1.2 address to your son's computer. Your wife's computer is probably assigned 192.168.1.4
    Do you have a shared printer? It might be 192.168.1.2 rather than your son's computer.

    The only way to see exactly what IP everything on your local network (LAN) is assigned is to put 192.168.1.1 into your browser address bar. This brings up the router set up. You go to a section called Status and find current routing or LAN table. Click on that and you will see the name of all your computers/printers and the current IP assigned to all of them.

    Millions of people using a router have the address 192.168.1.2 assigned to a computer or printer. This is NOT an address that is visible on the internet.
    If you want to find out how every website sees your computer, go here http://www.ipchicken.com/
    it will list the IP given by your ISP and the one the world wide web sees. The other address is only used by your router.
     
    plodr, Dec 1, 2008
    #13

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds