Hello and welcome to our community! Is this your first visit?
Register
Enjoy an ad free experience by logging in. Not a member yet? Register.
Results 1 to 6 of 6
  1. #1
    Supreme Overlord Spookster's Avatar
    Join Date
    May 2002
    Location
    Marion, IA USA
    Posts
    6,280
    Thanks
    4
    Thanked 83 Times in 82 Posts

    IP address using port 68

    The following IP address has been trying to get through my firewall constantly on port 68:

    10.49.224.1

    When I do a reverse lookup to see who it belongs to it just comes up as belonging to IANA as a reserved IP address.

    Am I just clueless here? What's going on?
    Spookster
    CodingForums Supreme Overlord
    All Hail Spookster

  • #2
    Senior Coder JamieR's Avatar
    Join Date
    Oct 2004
    Location
    United Kingdom
    Posts
    3,161
    Thanks
    0
    Thanked 5 Times in 5 Posts
    hmm...weird. I used McAfee visual trace to do the same thing as you did...

    What ISP do you use? have you tried emailing a complaint to abuse [at] iana.org?

    NetType: IANA Special Use
    NameServer: BLACKHOLE-1.IANA.ORG
    NameServer: BLACKHOLE-2.IANA.ORG
    Comment: This block is reserved for special purposes.
    interests me....especially the "Blackhole" bit...

    I would contact IANA personally and tell them what is going on, if they don't already know. Their servers could, for some reason, be scanning huge IP ranges to try and gain access to people's computers somewhere.

    Port 68 bootpd/dhcp

    This protocol is used by systems to automaticaly configure systems. In the older days of the Internet, all systems were configured manually. BOOTP was developed to allow agents to be automatically configured. DHCP was a second version of BOOTP that made it easier to configure PCs this way.

    You will often see such attempts against firewalls.
    http://www.iss.net/security_center/a...68/default.htm
    is a explanation of port 68's function/purpose.

    My firewall blocks multiple port 455 requests from host81-132-115-166.range81-132.btcentralplus.com. I have BT broadband, so I think that it comes from them....However, IANA are not an ISP.
    Attached Files Attached Files
    Last edited by JamieR; 04-17-2005 at 02:08 AM. Reason: modifications/additions

  • #3
    Regular Coder
    Join Date
    Apr 2005
    Location
    Look behind you...
    Posts
    208
    Thanks
    0
    Thanked 0 Times in 0 Posts
    well if you think someone is tring to get into your computer then u should look more into that IP address.

    But when i try to look up that IP address, i got no results. If you think is someone like a hacker, spy agent, or whatever then i think you should get PeerGuardian. This program uses almost no memory and it blocks IP addresses like crazy.

    Code:
    http://methlabs.org/
    Hope you get a solution!
    Web Tool Boy!
    - Domain information checker, dropping domains checker, + more.
    Domain Name Chat Forums - DNCForums.com
    - Get 50 points closer to a FREE domain name or a FREE rapidshare account!
    Live It My Way! - Lifestyle Forums
    - Enjoy your life, talk about interesting topics, get coupons!

  • #4
    Supreme Overlord Spookster's Avatar
    Join Date
    May 2002
    Location
    Marion, IA USA
    Posts
    6,280
    Thanks
    4
    Thanked 83 Times in 82 Posts
    After digging around at IANA I found this

    http://www.iana.org/faqs/abuse-faq.h...alUseAddresses

    Apparently that IP address is just part of another reserved block of IPs just like the loopback IP 127.0.0.1 or 169.254.x.x. So I guess it is either coming from my ISP or I've inadvertantly turned on some service looking for DHCP on my machine. I am running Linux btw not M$ Windows.
    Spookster
    CodingForums Supreme Overlord
    All Hail Spookster

  • #5
    New to the CF scene
    Join Date
    Dec 2008
    Posts
    1
    Thanks
    0
    Thanked 0 Times in 0 Posts
    Hi
    IANA is Internet Assigned Numbers Authority. Port 67 is the port used by a client to connect to a DHCP server in order to send a DHCPDISCOVER message to request a new IP. Port 68 is the port used by a DHCP server to communicate with the client for the same services, because the communication use udp there are a lot of cool things (and horrible things) you can do by manipulating communications on these ports.
    By the way, although Microsoft is the company that introduced Dynamic Host Configuration Protocol to the market, it is used by all OS's.
    Please let me know if this helps...

  • #6
    Supreme Master coder! _Aerospace_Eng_'s Avatar
    Join Date
    Dec 2004
    Location
    In a place far, far away...
    Posts
    19,291
    Thanks
    2
    Thanked 1,043 Times in 1,019 Posts
    3 years later it might...
    ||||If you are getting paid to do a job, don't ask for help on it!||||


  •  

    Posting Permissions

    • You may not post new threads
    • You may not post replies
    • You may not post attachments
    • You may not edit your posts
    •