← Autodidact Archive · Original Dissent · Snouter

Strange IP Addresses Using "tracert" Command

Thread ID: 19017 | Posts: 17 | Started: 2005-07-07

Wayback Archive


Snouter [OP]

2005-07-07 08:00 | User Profile

Anyone getting an unidentifiable IP address as the first hop?

In order to check, you can go to the Command Prompt (DOS) then type "tracert www.(whatever you want to check).com (or org, etc.).

I am getting an unknown IP address as the first hop when I tried a few websites using "tracert."

Trace Route

When you access an Internet address from your computer, you usually pass through several routers and computers before you connect to your destination server. The tracert utility in Windows allows you to see the path taken from your PC to the desired address. It can also indicate a problem in reaching your designated host.

The tracert command sends out a packet of information to each device (called a node or hop) individually. It does this three times.

From the DOS prompt, enter the tracert command and the IP address of the device that you wish to connect to.

  1. Click on the Windows START button

  2. Go to the Program folder

  3. Click on MS-DOS prompt

  4. In the DOS window at the DOS prompt type in:

      tracert xxx.xxx.xxx.xxx
    

    where xxx.xxx.xxx.xxx is the IP address of the device you are trying to reach.

  5. Press ENTER

  6. Shortly, a summary will appear of the routers you are passing through. The information will include time information. An * indicates that the "hop" caused a time-out. This can prevent you from reaching your designated host.

  7. When finished, type EXIT at the DOS prompt to close the DOS window


Ponce

2005-07-07 17:07 | User Profile

Keeping this one in my favorite, lets see where it will take me.


Snouter

2005-07-07 18:15 | User Profile

Ponce, what do you get when you do the tracert test? It could be that the first step (hop) is to the IANA.ORG since that is like the database of websites. I am just trying to make certain that it is not some kind of spyware thing. I keep my hard drive pretty clean and have removed the most stubborn spyware files so this is unexplained so far. I checked with someone else and they have a different IP as the first hop, but it is also an "IP Range Reserved by IANA.org" that does not indicate where the hop is located.


Ponce

2005-07-07 19:23 | User Profile

Believe it or not my comp is eight years old and is 87% empty.

I never open even an Email unless I know the person that sent it.

What I will do now is to go to "key word" and find out more about it before I try it out.

It not that I cannot afford to buy a new comp but if it still working (as my 91 toy truck ) then why buy another one? after all, all I do is to read the news and come here and to Gold is Money .com. :biggrin:


Snouter

2005-07-08 03:58 | User Profile

I use Firefox and their email which has a good spam filter and I never open unknown mail also.

There is nothing special about this simple DOS command. Having first learned computing in the DOS environment before Windows was invented, it was no big deal to do the test. Simply get a prompt like this C:> and type:

tracert ww.amazon.com (using 3 w's - I shortened it to avoid creating a link)

or tracert ww.originaldissent.com (using 3 w's)

or tracert Goldismoney.com or whatever, it doesn't matter.

In DOS, it will list the various steps it takes to reach the website.

The question is, what is the first IP Address listed and is that IP Address identifiable?

I have checked a couple other people's computers at different locations and they have an IP Address that is like 10.xxx.xx.x and starts the list which results in this:

"ERROR: IP Range Reserved by IANA.org"

when trying to search the location of the IP Address from samspade.org.


Snouter

2005-07-08 18:49 | User Profile

Ponce, have you tried it? Anyone else care to do this? It is very simple and you should know how your PC finds websites.


Ponce

2005-07-08 21:59 | User Profile

I will try it later but with a finger in the "shut down" of my comp.

I have been doing ok for 10 years by not fooling around with what I don't know, specially in the comp.

In computer time my comp is about 200 years old, don't want to give it a heart attack hahahahahahahahaha.


Snouter

2005-07-09 02:11 | User Profile

I figured the older people would be familiar with DOS. :whlch:

DOS is the underying software that operates the PC. There are a number of DOS commands that give the operator info. For example, in DOS if you type "dir" it will list the files in the current "directory."

The attached file is an image showing what I am suggesting people look at. I first did a "cd\" command (change directory) which brings me to the root directory (because I included a ). That is not necessary for this, but it just shows how commands work in DOS. You or anyone else considering this need not say what the results are when you hit enter. I am just curious if the first IP address starts with a 10 and is not identified when it is put in a search engine for IP Addresses.

This is not rocket science.


madrussian

2005-07-09 03:47 | User Profile

What do you mean by unidentifiable address? If you see asterisks, that simply means that those routing points don't return the ICMP ping. They don't have to, generally.


Snouter

2005-07-09 05:46 | User Profile

madrussian, the first IP Address I get no matter what www address I try starts with a 10. I put the whole IP Address in a IP identifier like [url]www.geobytes.com/[/url] or [url]www.samspade.org[/url] and it gives me an error; that that address is reserved.


Happy Hacker

2005-07-09 07:08 | User Profile

[QUOTE=Snouter]madrussian, the first IP Address I get no matter what www address I try starts with a 10. I put the whole IP Address in a IP identifier like [url]www.geobytes.com/[/url] or [url]www.samspade.org[/url] and it gives me an error; that that address is reserved.[/QUOTE]

IP addresses that start with 10 are not routed on the Internet (i.e. they're reserved). Your first hop is a local router, but the tracert command is still trying to treat it as an internet address.


Snouter

2005-07-09 07:39 | User Profile

I don't have a router so does that mean the PC sees the cable modem as being a router? If so, why wouldn't my PC see the cable modem as its actual IP Address instead of this bogus 10.xxx.xx.x address?


Happy Hacker

2005-07-09 15:11 | User Profile

[QUOTE=Snouter]I don't have a router so does that mean the PC sees the cable modem as being a router? If so, why wouldn't my PC see the cable modem as its actual IP Address instead of this bogus 10.xxx.xx.x address?[/QUOTE]

You might not have a router, but your cable company does. As a cable user, you're on a local network with your neighbors. That network is routed to a server that is connected to the internet. Internet IP addresses are precious so the ISP doesn't waste them on hardware that doesn't itself serf the internet.


madrussian

2005-07-09 16:04 | User Profile

Get a router, Snouter :biggrin:

And quick, if you care about security.


JoseyWales

2005-08-31 10:26 | User Profile

just guessing, but from the first post, it sounds like spyware to me. not suprising if your using windows.


BlueBonnet

2005-09-01 03:09 | User Profile

[QUOTE=JoseyWales]just guessing, but from the first post, it sounds like spyware to me. not suprising if your using windows.[/QUOTE] there are a few good free spyware removal tools if anyone is interested: one is [url="http://www.lavasoftusa.com/support/download/"]Ad-Aware[/url] by Lavasoft, it is a reputable program in that it does not install spyware on your computer (some spyware "removal" tools do this) another is [url="http://www.safer-networking.org/en/download/"]Spybot, Search and Destroy[/url]


JoseyWales

2005-09-01 12:59 | User Profile

[QUOTE=BlueBonnet]there are a few good free spyware removal tools if anyone is interested: one is [url="http://www.lavasoftusa.com/support/download/"]Ad-Aware[/url] by Lavasoft, it is a reputable program in that it does not install spyware on your computer (some spyware "removal" tools do this) another is [url="http://www.safer-networking.org/en/download/"]Spybot, Search and Destroy[/url][/QUOTE]

Yes, those are good at finding almost everything that infects your system. However, when it comes to actually removing the little nastys, these apps dont always remove 100% of what they find. This is due to the fact that what is known as "malware" can actually "morph" themselves into something else just before getting deleted. Some malware/adware etc can actually recreate themselves under a new name. If you run multiple scans/deletes and continue to find the some of the same things showing up in the list, then its time to do a google search for a manual "howto" on removing the specific infection. Often times this involves deleting registry keys.

That said, Ive yet to need to do this on my Linux machine...but lots of folks I know get their winders pc's loaded with all kinds of junk.

:tongue:

The #1 culprit for getting this crap on your machine is using Internet explorer (internet exploder), as its wide open for this kind of attack. Another no-no is letting your kids download and install any games they want.