IP Address Lookup?

Reply

  #1  
Old 11-02-03, 08:23 AM
E
Member
Thread Starter
Join Date: Mar 2002
Location: Ontario, Canada
Posts: 587
Received 0 Votes on 0 Posts
IP Address Lookup?

Something on my machine occasionally tries to connect to an IP address but my firewall (Zonealarm) catches it. I would like to know what is doing this (virus?!?).

Is there a way to trace an IP to find out where it is?

The address is 24.255.255.255 port 11423
 
Sponsored Links
  #2  
Old 11-02-03, 09:07 AM
tae's Avatar
tae
tae is offline
Member
Join Date: Nov 2002
Posts: 2,469
Received 0 Votes on 0 Posts
Ports 11372-11599 Unassigned
255.255.255 usually subnet mask for network
Zone Alarm has very good help pages and live online support.
My guess is its trying to connect with the other computers on your home network.
 
  #3  
Old 11-02-03, 09:24 AM
C
Member
Join Date: Nov 2001
Location: Taylors, SC
Posts: 9,483
Received 0 Votes on 0 Posts
For what it is worth 24.255.255.255 is not a valid address.
 
  #4  
Old 11-02-03, 11:42 AM
E
Member
Thread Starter
Join Date: Mar 2002
Location: Ontario, Canada
Posts: 587
Received 0 Votes on 0 Posts
The ports part I don't understand but yes, I seem to recall the 255.255.255 numbers when I set up a home network a couple of years ago. I only have but one computer at present.

I run the trial/free version of Zone Alarm so it doesn't get very specific when I visit the help page. It suggests denying the access and see what happens. That I did & everything is running OK.

Still curious about what is happening though.
 
  #5  
Old 11-02-03, 03:27 PM
C
Member
Join Date: Nov 2001
Location: Taylors, SC
Posts: 9,483
Received 0 Votes on 0 Posts
It seems to be a broadcast on a class A block. A sort of digital "Is there anybody there?" on a network. There would be 16 million possible addresses in such a block.

Curious.
 
  #6  
Old 11-02-03, 07:12 PM
R
Member
Join Date: Sep 2003
Location: Central New York State
Posts: 13,973
Received 0 Votes on 0 Posts
A word on port addresses.

There are 65535 possible port addresses.

Port addresses in the low range are generally used by known services, such as telnet, ftp, etc.

Port addresses in the higher range are available for anyone to use.

Any compuiter program can use any port address it wants to, as long as the port address is not presently being used on the computer.
 
  #7  
Old 11-03-03, 10:05 AM
sir_jeffrence
Visiting Guest
Posts: n/a
If you upgrade to ZoneAlarm Pro, then supposedly you will be able to trace some of the IP addresses. I have never upgraded but just so you know.
 
  #8  
Old 11-03-03, 10:17 AM
R
Member
Join Date: Sep 2003
Location: Central New York State
Posts: 13,973
Received 0 Votes on 0 Posts
There are a myriad of ways to trace IP addresses.

One way is to use tracert (traceroute), a program in your windows directory. You use the program as follows:
tracert <ip_address>
e.g.
tracert 209.250.66.222

This will tell you who is assigned the particular IP address. It may or may not tell you the actual company or end user, but it will usually at least tell you the ISP involved.

Another method is to use any number of shareware and freeware programs. I use one called neotrace. Just go to download.com and search for "ip address resolution".
 
  #9  
Old 11-03-03, 12:09 PM
Forums Admin
Visiting Guest
Posts: n/a
IP: 24.255.255.255

The address is not a valid address; the IP was most likely spoofed in some manner or ZoneAlarm didn't understand how to interpret the incoming request. Any IP in the that range has something .255 in any of the octets is reserved for broadcast services just like chfite indicated. The number is not even a vaild subnet mask.

Regaudless to find out who a ip address is allocated to on the internet, you can lookup the ip address in the ARIN WHOIS database.

You also can find a list of what ports have been defined for a specified use at:

http://www.iana.org/assignments/port-numbers

Trace Route as racraft indicated is also a ways to find out what network the IP address is on and the DNS name for the machine.

A DNS lookup (nslookup.exe in the command window - WinNT, Win2k, WinXP, & Win2003) to find out the host name (if any exists) of machine according to DNS server.
 

Last edited by Forums; 11-03-03 at 12:46 PM.
  #10  
Old 11-03-03, 02:35 PM
E
Member
Thread Starter
Join Date: Mar 2002
Location: Ontario, Canada
Posts: 587
Received 0 Votes on 0 Posts
OK, thanks to everyone. I disallowed the connection and everything is still running.
 
Reply
Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Thread Tools
Search this Thread
 
Ask a Question
Question Title:
Description:
Your question will be posted in: