IP Addys...

C

coloravalanche

Guest
I have several list of ip addresses that has been trying to access my computer...How do I findout who these ip addresses are? How does that work? Pls help! Thanks! :D
 
http://www.dnsstuff.com/


Y said:
Great, but it does NOT show the name of person
along with the IP address....

How ???

You can't get their name (unless you hack into their computer), but with the link I gave above, you can get all kinds of info, like what town they are from. Also, if you use Zonealarm, ir has feature that will tell you what kind of access was attempted on your pc and if you need to worry about it. Im not sure about other firewall programs.
 
It's usually not possible to get the person's real name without them doing something illegal unless their hostname resolves to their real name (some companies work this way, for example johndoe.staff.foo.bar.net). I would suggest looking up their DNS information on ARIN and sending an email to the abuse department of their host. You probably won't get the person's name, but they could lose their internet connection if they're not using a proxy.
 
Yep, That's correct I'm familiar with ARIN Whois InterNIC etc..
But, their info are not what I wanted anyway, thanks !
 
That is correct, and another problem making it harder to trace is that most of the time ISP assigns IP address using DHCP method rather than Static. This means that the IP address can change. Also, usually expert hacker will NEVER use their real IP address to hack into other computer, so instead they would look for available proxy server to mask their identity. Proxy server is like "third party" server and it can be anywhere in the world. For example here I am in New Yawk, and I found a proxy server in nigeria then I used their server to hack into your computer. You suspected that I hacked into your PC, you would try to trace to me, but really you traced back into Nigeria! That is because I "Used" Nigeria's server as fake starting point.

Best solution to this problem is increase firewall strength, or you can buy a reputable proxy server (They aren't cheap), or firewall service provider. Sorry nothing is free to protect yourself from hackers.

Note: If you got VP and that Sorenson or CSD provided you free router... I HIGHLY recommend you to lock that router. I can't believe 95% of them aren't locked! Turning on password protection isn't enough!!! CHANGE the password!!!. I also can't believe 75% of them didn't change password! It is soooo easy! I know 75% of them have password "ADMIN". So Again I highly recommend to enable PWD protected AND CHANGE the password!

Teresh said:
It's usually not possible to get the person's real name without them doing something illegal unless their hostname resolves to their real name (some companies work this way, for example johndoe.staff.foo.bar.net). I would suggest looking up their DNS information on ARIN and sending an email to the abuse department of their host. You probably won't get the person's name, but they could lose their internet connection if they're not using a proxy.
 
diehardbiker65 said:
That is correct, and another problem making it harder to trace is that most of the time ISP assigns IP address using DHCP method rather than Static. This means that the IP address can change. Also, usually expert hacker will NEVER use their real IP address to hack into other computer, so instead they would look for available proxy server to mask their identity. Proxy server is like "third party" server and it can be anywhere in the world. For example here I am in New Yawk, and I found a proxy server in nigeria then I used their server to hack into your computer. You suspected that I hacked into your PC, you would try to trace to me, but really you traced back into Nigeria! That is because I "Used" Nigeria's server as fake starting point.

Best solution to this problem is increase firewall strength, or you can buy a reputable proxy server (They aren't cheap), or firewall service provider. Sorry nothing is free to protect yourself from hackers.

Note: If you got VP and that Sorenson or CSD provided you free router... I HIGHLY recommend you to lock that router. I can't believe 95% of them aren't locked! Turning on password protection isn't enough!!! CHANGE the password!!!. I also can't believe 75% of them didn't change password! It is soooo easy! I know 75% of them have password "ADMIN". So Again I highly recommend to enable PWD protected AND CHANGE the password!

You made good point...however, may I ask you question...are you saying when I use vp - chat with person on vp...other person could spy watch our conversation while we chat on vp? OR what?

What does PWD stands for? thank you!
 
Y said:
Yep, That's correct I'm familiar with ARIN Whois InterNIC etc..
But, their info are not what I wanted anyway, thanks !

I second that..what I am looking for is that I want to know who these ip addy people are that has been access into my computer..
 
PWD = Password

No, not what I am saying, most router that was provided and installed with VP isn't correctly set up. They were all set up the same way, making it ALOT easier for hacker to break in. Hackers loves "Default" setting. So, you need to go into your router if it was provided by Sorenson or other VP providers and enable password protected, and change the password under both setting ADMIN and USER. There is two accounts already included in the Dlink router. Change PWD on both accounts.

coloravalanche said:
You made good point...however, may I ask you question...are you saying when I use vp - chat with person on vp...other person could spy watch our conversation while we chat on vp? OR what?

What does PWD stands for? thank you!
 
I am sorry this is NOT possible! You would be looking in ISP domain, and I bet NONE of ISP would be willing to dig in information for you and tell you who it was. These "Whois" applies on who OWNS the domain, not the user of the domain, therefore it is meaningless. For example, if you saw my IP address, you would type in WHOIS, and that would return you to my cable modem company name, do you think my cable modem would tell you my identity? If they did, I'd sue them, would they want that?

coloravalanche said:
I second that..what I am looking for is that I want to know who these ip addy people are that has been access into my computer..
 
diehardbiker65 said:
I am sorry this is NOT possible! You would be looking in ISP domain, and I bet NONE of ISP would be willing to dig in information for you and tell you who it was. These "Whois" applies on who OWNS the domain, not the user of the domain, therefore it is meaningless. For example, if you saw my IP address, you would type in WHOIS, and that would return you to my cable modem company name, do you think my cable modem would tell you my identity? If they did, I'd sue them, would they want that?

true..however, i would prefer the company telling me who...because its hacker...anyway..you said Hackers loves "Default" setting? how do they access our computer? im stupid with hacker issues..still learning..ha!
 
Do you really prefer companies telling you? How about me asking your company telling me who you are so I can open credit card under your name and max it out leaving you mountain of debts? or worse empty your bank account causing you to bounce your checks?

Default... Perfect example, the password in your router, if you haven't change, I know it is ADMIN as password! That is DEFAULT setting. That is because company decided and chose "ADMIN" as default so in case you forgot your password and need to reset your password in router, there is
"ADMIN" so you can reset your own password.

coloravalanche said:
true..however, i would prefer the company telling me who...because its hacker...anyway..you said Hackers loves "Default" setting? how do they access our computer? im stupid with hacker issues..still learning..ha!
 
diehardbiker65 said:
Do you really prefer companies telling you? How about me asking your company telling me who you are so I can open credit card under your name and max it out leaving you mountain of debts? or worse empty your bank account causing you to bounce your checks?

Default... Perfect example, the password in your router, if you haven't change, I know it is ADMIN as password! That is DEFAULT setting. That is because company decided and chose "ADMIN" as default so in case you forgot your password and need to reset your password in router, there is
"ADMIN" so you can reset your own password.

Yea, I prefer to know who has been accessing into my computer...but I doubt the company will give us deeper infos only with names...anyway thanks for your help!
 
Y said:
Great, but it does NOT show the name of person
along with the IP address....

How ???
You can't just get someone's name by checking his or her IP address. It only shows you where the IP is originating from and what server or ISP that IP address is from.
 
VamPyroX said:
You can't just get someone's name by checking his or her IP address. It only shows you where the IP is originating from and what server or ISP that IP address is from.

Vamp, I understand your point...however I was reading and saw the word proxy is false...what does this mean? anyway, does that mean is it possible that this person is from elsewhere and using here in oklahoma?

Also, this link you gave me...While I was using it to check several ip addresses..the program prevented me not to keep using it...why is that? is it bec they want me to pay for it?
 
coloravalanche said:
Vamp, I understand your point...however I was reading and saw the word proxy is false...what does this mean? anyway, does that mean is it possible that this person is from elsewhere and using here in oklahoma?

Also, this link you gave me...While I was using it to check several ip addresses..the program prevented me not to keep using it...why is that? is it bec they want me to pay for it?

A proxy in this case is a computer that does something for another computer. For example, if you vote at a shareholder's meeting "by proxy", what that means is you send someone with a written affidavit that they are voting for you rather than attend yourself.

With regards to networking, a proxy is a computer that issues network actions for another, acting as a middleman between one computer and another. If I connect to a proxy server for my web browsing, that proxy server will send all of my HTTP requests for me, then relay the data sent by the server back to me. This process is often slow.

So you're probably wondering, why use a proxy if it's slow? The reason is because a lot of proxies are free and open to the public... And therefore they're a convenient way of staying anonymous on the internet. Your IP isn't quite as traceable if you're using a proxy server because the computer on the receiving end is communicating with the proxy and the proxy's IP address, not with you. Since many people are using these servers, the servers don't log the packets that come in and out (unless they appear malicious) because there would simply be too many of them to track, making proxies essentially the perfect way for a hacker to start an attack without the original person having any way of finding out who they are.
 
Teresh, from reading your posts here and elsewhere, you seem to have good knowledge of networking. Because the topic of 'proxy' has come up here, and with your explanation, I would like to ask you about local proxies...... I know I could 'spoof' my IP by configuring a proxy (basically my computer telling the internet that Im at a different IP that doesn't really exist {you get a lot of junk email this way}). I guess my question is, How could I bypass the proxy and determine the actual IP of person sending the junk/malicious email (it must be possible)?

TIA
 
What is proxy? :confused:

OK...How do I block my ip address from anyone to see my ip address?
 
As what Teresh just explained about proxy server. She is indeedly correct, so read her explaination.

You can set up your firewall to refuse to respond "Ping", thus making your ip address less chance of getting seen. Im not saying 100% elimination of being exposed. You could buy and subscribe at www.sonicwall.com, the only problem you will be dealing with is with VP. I am not sure how this would work bypassing the firewall just for VP.

Again, like what Teresh and others said... NOTHING is 100% foolproof. Hackers, viruswriters, malicouswriters, spywarewriters, etc are out there just to have fun trying to crack into something on daily basis. So, my suggestion... forget about trying to find who did on you and start improve your internet security.

I have always telling people that computers are the most stupidiest machine known to man! They don't really have the brain to discriminate anything. This includes that computer can NOT suspect anything. All they do is follow the instructions written by programmers and take the action from there.

coloravalanche said:
What is proxy? :confused:

OK...How do I block my ip address from anyone to see my ip address?
 
Back
Top