Forums & Blog

I keep getting an alert from ZoneAlarm firewall that it has blocked an intruder from IP address 192.168.0.3. Can someone explain what this IP address is and what is happening...Thanks

192.168.0.3 would be a local IP on your network.  Look in the log settings on your firewall to see what services from that IP are being executed and to what IP and port it is supposedly attacking.

Then, find the machine that corresponds to 192.168.0.3 and trace the culprit. 

This IP has been tracking me for weeks.  Whenever I access the internet it follows me. 

If you're running Windows XP, go START,all programs, accessories, command prompt, and then type in >netstat -an 20, notice the spaces.

This will give you a running log of the status of the internet connections.  Just minimize and bring it up from the task bar whenever you want to see what's going on with your computer as per the internet. 

The 20 is in seconds and is the update time for your log. 

192.168.0.3 appears to be communicating with wthe.theplanet.com and is a trojan sending all your info, read passwords, account numbers, etc.

For some reason the  url for  the planet dot com has been deleted from the preceeding sentence.

I have run scans from Nortons, f-secure, and lastly spyware doctor from pctools, and I've pissed away my money on all accounts.

The best investment you could make is to hire on with the person that created troj_banload.bex as he seems to be smarted than the previously mentioned antivirus organizations.

 

 

 

 

Here's the link to trace an IP address:

Hi,

 

I have just identified my desktop as 192.168.0.03 and came across your issue. My computer is not used for this hacking, so I'm buggared if I know how it has happened? I'm trying to get my camera setup to be accessed from the web, hence discovering this issue. I there anything I can do to assist? Cheers Steve - Perth Western Australia.

ALL computers on a network will have an IP address.  192.168.0.3 is characteristic of an IP address on an internal network.

Hi i got the same problem i use CA security suite and the firewall alerted me that someone was trying to access my computer, Remote address 224.0.0.22 () from 192.168.0.3

that IP address (224.0.0.0) is in the range of IP addresses that are reserved for Multicast communications.

Do you have anything on your computer that listens for incoming connections for Chats, or Meetings, or anything like that?

192.168.0.3 is My IP Address Im not sure why it's trying to access your comp.

TiParker:

192.168.0.3 is My IP Address Im not sure why it's trying to access your comp.

 

Once again, let me explain this.  192.168.x.x is what an IP address on an internal network will look like.  Thus, the only way that your particular 192.168.0.3 is accessing their server would be for you to be on their physical internal network.  Since their are thousands of small LANs using 192.168.x.x for their internal networks....there are thousands of computers that are 192.168.0.3 (I even have one). 

Strange. All of my 10. addresses trace back to the planet as well.

192.168.xxx.xxx, 172.16.xxx.xxx, and 10.xxx.xxx.xxx are all reserved for private networks, and should never show up in something like http://www.urgentclick.com/address_trace.php.

 

 

yea i have that ip too.. but i havnt used this for hacking or anything since idk how

I've just started using PeerGuardian2 and it's blocking tonnes using 192.168.0.3. They are from all over the place... FiberCloud, SECOM, Vodafone interactive, inuversities in China, Africa etc. PeerGuardian is blocking them all so I'm not worried but it made me wonder what was going on when I saw them.

 

thats my I.P address lol

I get that message as well, but I'm getting it from my Wii video game.  (It's set up as 192.168.0.3 so it can access my wireless router for it's internet connection.)  Might be something as innocent as that.  Lots of people have that IP address on their systems... basically, unless you're dealing with someone who could shut your firewall off anyhow, you won't get an attack from inside your own network.  Chances are, one of your internal computers or gaming systems (PS3, X-Box, Wii) is the culprit.  (My Wii keeps accessing weather for weather updates.)