Reveal Your IP and other scans

SEJ · Cadet Joined: Sep 01, 2003 Posts: 1 Location: Thailand

Every time I use any of the scans I am told my IP is 208.147.1.1 which it is not. Using Norton Security scan and Gibson Research Probe my ports they always find and show my correct IP address. I am not behind a proxy. Any ideas what's wrong, anybody?

SEJ

Paul · Admin Joined: Feb 22, 2002 Posts: 4580 Location: USA

That's odd... what is your traceroute to ccsp?

SEJ · Guest

Sorry, I cannot see the traceroute, but I should be going directly via my local ISP in Bangkok. Just tried again with same result 208.147.1.1

SEJ

Paul · Admin Joined: Feb 22, 2002 Posts: 4580 Location: USA

Are you using the basic shields up at GRC?

Stinehart · Cadet Joined: Jan 22, 2004 Posts: 1 Location: USA

Are you using a router, or are you on a home network. If your sharing IP addresses with any other computers on a home network.

silvanet · Cadet Joined: Feb 03, 2004 Posts: 5 Location: USA

I also get an incorrect IP address from your "Reveal your IP" scan. I'm running behind ZoneLabs' firewall with the Internet security setting at maximum or "stealth" mode. The IP address that you identify is listed by WHOIS an alias of my IP provider.

silvanet · Cadet Joined: Feb 03, 2004 Posts: 5 Location: USA

So sorry about the double post. I got happy fingers, please forgive. I will get better at this. I also noticed that even when I turn off my firewall your scan still returns a totally wrong IP address which is an alias of my IP provider. Is that a good thing?

Paul · Admin Joined: Feb 22, 2002 Posts: 4580 Location: USA

Yes that would be a good thing. This means that while inspecting the TCP/IP packets your PC is sending, the code cannot extract your correct IP address. This means the proxy you are going thru is a true anonymous proxy server. However, there is still a javascript test that I haven't incorporated into the program yet.

Paul · Admin Joined: Feb 22, 2002 Posts: 4580 Location: USA

Ok, I recoded Reveal Your IP to check for additional items inside the TCP/IP packets. For those that are reporting back incorrect 'your real ip' information, can you please retry and let me know if its correct now?

http://computercops.biz/modules.php?name=Reveal_IP

silvanet · Guest

OK, I tried the recoded Reveal IP link and it still reports an alias belonging to my IP provider and not my machine IP reported by the ipconfig command. This is so, with or without ZoneLabs firewall running in "stealth" mode. You said this is a good thing; so now I have another question. Is my firewall redundant? Or, better yet, since it appears to be so in this particular situation, is it neither necessary nor useful to keep running a firewall?

silvanet · Cadet Joined: Feb 03, 2004 Posts: 5 Location: USA

Sorry, again, I posted as a Guest, without first logging in. Now, I went on to try all your different port scans: UDP, TCP, Trojan. None of them worked. I assume it is because you are unable to detect my IP, so this is all a good thing. Yes?

silvanet · Cadet Joined: Feb 03, 2004 Posts: 5 Location: USA

Now, if all this truly anonymous proxy server stuff is good, I guess I might be protected from someone trying to access my computer through the ports, but I could still get a virus by allowing some malicious code to enter and work from within. First, I accepted your email virus scan service. Does this mean that I can dispense with an antivirus program? What can I do to protect from viruses? I don't mean to be a pest, but just before registering with you, something happened that turned all my Windows menus to gibberish like the "wingdings" font. My antivirus program had up-to-date virus definitions and did not detect it. Occasionally the antivirus program would pop up a message saying it had found a Trojan dowloader Winfavorit.A, refering to a location that did not exist, nor was it in the registry. It told me to run the program to remove the virus; but when it did a complete scan (even checking all the options for a deep scan) it neither identified nor removed anything. None of the online virus scan services identified it or were able to remove the "wingdings" menus (these are two separate virus incidents to which I am refering). None - not McAfee, not Norton, not Panda, not AVG, not Trend Micro, nobody. I removed the drive and re-installed Windows into a new drive. I am just now getting around to trying to recover important data from the drive with a program I have used before called R-Studio.

Paul · Admin Joined: Feb 22, 2002 Posts: 4580 Location: USA

I had to do another slight tweak to the code while folks are helping me test it. If you are routing thru a true anonymous proxy I won't be able to obtain your real IP unless I try using a client side script to detect it and send it back to the server.

As for the email virus scan service, its use is not meant to replace any anti-virus tools on your system. It can however be used as a second source of validation. I'm currently testing a new anti virus product for this service.


	Home ˇ Topics ˇ Submit News ˇ Top 10 This entire site, Cops Themes, and Computer Cops are Š 2002 - 2004 Computer Cops, LLC. All rights reserved. You can syndicate our news using the file RSS 0.91, ultramode.txt, or RSS 1.0. Acceptable Use Policy. Use signifies your agreement. Engine Copyright Š 2002 by PHP-Nuke, GNU/GPL Licensed. ICRA Member. Paul Laudanski, Member of Computer Cops, LLC Server Load: 529 pages served in previous 5 minutes. Page Generation: 0.587 seconds.