.:: Some IP Address related questions? ::.

[tuXian]

Got a couple of IP adress related questions.

1. My website uses a shared IP. How can I know the other sites on the server who are using the same IP?

2. My ISP provides me a static IP. When I search the IP info www.DNSstuff.com then it shows the IP owner as my ISP and location of IP as Mumbai whereas I am in Hyderabad! Why?

3. Like we purchase domain names individually can we purchase static IP addresses also? so that when searched on net on sites like www.DNSstuff.com it should return me as the owner. If yes then Where can we purchase the domains from?

4. Since IPV6 is officially launched are its huge IP addresses already in use?

5. Heard there a some new dns resource records in IPV6 implentation. Any idea what are they?

Thanks

[theraven]

1) you cant ..
the ip is like the property of the server and they manage the redirection of different sites ... more like subdomains for them
if u use that ip address you'll be taken to the server's website

2) the owner of any ip will be the one who has leased the ip ... here your ISP
i have no idea why it shows mumbai tho
maybe their main service provider is in mumbai and they are leasing the ip's from there

3) yes you lease IP addresses like i said
but you lease/buy one when your setting up a server ...
you need to have something running on ur computer to make it accessible via the internet .. which is server software and certain services ...
and then your website
the ip's will be leased from your isp ! ofcourse here we arent talkin the 64 -256 kbps "broadband" isp's here

4) ipv6 is still being implemented
a lot of changes have to be made to the current setup to support a 128 bit ip address
be patient

5) wait for ipv6 to be more common

[digen]

2. My ISP provides me a static IP. When I search the IP info www.DNSstuff.com then it shows the IP owner as my ISP and location of IP as Mumbai whereas I am in Hyderabad! Why?

Thats because even if you have a static IP , the block or range of IP addresses has been assigned to your ISP.Your IP being static/dynamic doesnt come into picture here.Its a cumbersome job for the ISP to update information for each & every client who doesnt need to host anything on the internet not like commercial org's,institutions,business co's.

3. Like we purchase domain names individually can we purchase static IP addresses also? so that when searched on net on sites like www.DNSstuff.com it should return me as the owner. If yes then Where can we purchase the domains from?

Yes ISP's provide extra public IP'S[static] at a cost.You can then map a domain to the IP & host the required services.Thats exactly how commercial org's & institutes have their services published on the internet.
For domains check out the last few pages of digit,there are quite some offers there.

[tuXian]

ok thanks

Does this mean though I can get an IP from ISP I cannot become the absolute owner of the same?
Are only ISP's allowed to own IP's? What I mean is if individuals are allowed a whois should return the persons name as the owner of the IP!

BTW who manges the IP allocation? Is it the same like frequency spectrum?? Some govt or related agency???

Can someone plz explain

[digen]

I'm not sure about your first query.
Actually its a hierarchial process, several orgs around the world have been given the authority to assign IP's.Check out the links for in the second url at the bottom.They get it from the main " Internet Assigned Numbers Authority".
I'm not sure exactly how this would work but you will either have to have a domain registered or the ISP has to update the necessary details for the registrant,i'm not sure of the latter.

The IP assignment is managed & looked after by the
Internet Assigned Numbers Authority.

You can check a few resources here to get a better idea:
1.http://www.internic.net/
2.http://www.iana.org/ipaddress/ip-addresses.htm

[Deep]

Originally Posted by tuxian

1. My website uses a shared IP. How can I know the other sites on the server who are using the same IP?

Originally Posted by theraven

1) you cant ..
the ip is like the property of the server and they manage the redirection of different sites ... more like subdomains for them
if u use that ip address you'll be taken to the server's website

you can sir

I had mentioned it in his other post..

but mentioning here again...

http://whois.sc/ (SiteName.com or IP here)
http://whois.webhosting.info/ (SiteName.com or IP here)

it will show the number of sites hosted on same IP..

cheers
Deep

[theraven]

i didnt see that post
when my dns was down
i somehow looked up the ip of my site
it was hosted on xxxx host
when i tried that ip later ... i accessed the server page
even with the sub folders .. it said not found ..
anyways .. thats what i thot .. thanx for the update

[suj_engico]

Can IP adress pf a PC be used to hack it?????
IF yes than can the hacked information be edited?
Please reply!!

[theraven]

u wanna hack pc's using the ip address ?
man if u figure out let me know ?
ill even give u my ip address .. both of them
see if u can hack into it
192.168.0.1 and 192.168.0.2
plz dont edit any of my hacking information huh !

[Deep]

Originally Posted by suj_engico

Can IP adress pf a PC be used to hack it?????
IF yes than can the hacked information be edited?
Please reply!!

No,it cant be

But from IP address information of the machine can be found by scanning it...

but if you have internal IP address i.e. 10.x.x.x, 172.16.x.x, 192.168.x.x then no need to worry from outsiders..

anyways i would suggest having a decent firewall if you are on cable net

Deep

[theraven]

deep dude i do hope u realise i was kiddin when i gave the 2 ip's ?

[Deep]

yup

[tuXian]

hey one more thing can the IP address be used to send in the data i.e some advertisements like the messenger services ones(not the chatting wala messenger).

[Deep]

Originally Posted by tuxian

hey one more thing can the IP address be used to send in the data i.e some advertisements like the messenger services ones(not the chatting wala messenger).

i didnt get u..
can you explain with example pls ?

Deep

[tuXian]

In windows 2K and XP theres a service called the messenger service that is used to send messages in network. This can be verified by typing the following in Run under start menu:

services.msc

this will open the services window that shows the different services like IIS, RPC etc running or their current status etc. Here in the list you will find a service called messenger.

This is what the description given about it in the window there

"Sends and receives messages transmitted by administrators or by the Alerter service."

Using this service I am getting irritating messagebox or window dialogue based messages that says

"Your computer is effected with spyware contact spyblot@spyblot.de" etc and lots of other irritating messages.

Heres the screenshot of one of those messages


When I stop this service then these messages stop coming.

One more thing I had 12 hour net connection before that worked in the evenings. But when there was no connection in the morning(only ISP's site works and no other website works in the morning)
still I use to get these irritating messages. They also come when connection is was on in the evenings.

So I wanted to know that how come they work even when theres no connection how it worked? may be they are targetting my static IP??

[Deep]

no your local isp might be sending it...since u said ur isp site used to work at that time so it is highly possible that your ISP is sending these alert messages..

Deep

[tuXian]

ok, but is ISP using IP address to send these kinda messages.?

Is there a chance that other people in the ISP network are sending me these again using Ip?Anyways for info I connect using cable modem that works on DOCSIS protocol I suppose. I am unable to see anybody else on the network nor they are able to see me. I am very confused!

[Deep]

ISP can send the message coz they might have enabled broadcasting rights to themselves

they can send using some software or by dos command net send

"net send username message"

I hope this clears your confusion
Deep

[tuXian]

After seeing ur last reply I tried sending myself a message by writing this on command prompt

net send username message

but after sometime got a failure msg saying user wasnt found.

Then I sent tried messaging this way

net send mystaticIP message

This time I got the message in a message box and it too had messenger service in its caption.

So this means using my static IP i was able to send a msg to myself. In the same way if someone knows my IP they can message me using my IP

Is my ISP selling my IP to other marketing parties?

[theraven]

net send "username" message ???
i thot u always use IP or the computer netbios name

username is for when the pc's are connected to a domain AFAIK !!

so for sending a msg over lan u need to have messenger service running on any/all pc's which will be partaking in it and then use for eg.

net send 192.168.0.1 "hello how are you"

quotes are required if u use spaces in your message

and dun worry afaik its ur isp sending u those msgs
and usually ISP's use NAT services . so u use a different private ip address which is translated to a public ip address via NAT
this is how they protect your pc from incoming attacks .
however u are still prone to attacks from within the lan

deep sir am i right this time ?

[enoonmai]

Well, no one has posted this information so far, but the Windows Messenger service is routinely exploited by spammers to send advertisements via it. Microsoft recommends that you turn it off and if you are using Windows XP SP2, it will be disabled by default when installation completes. The message is usually started when a program runs the

net send * "<message>"

command and you get a window with
Messenger Service
Message from source to yourcomputername on date time
Message Text

Go to services.msc, stop the service and then set its startup type to Disabled. For more info, refer here:

http://support.microsoft.com/default...;EN-US;Q330904

[valtea]

talking abouty dns and ip is i install a web browser in one of the client in a cyber cafe (all having same external ip)
i can access the site by http://internal.ip/
Is there any way that i can ppl from outside see the site?

[digen]

Web browser?eh? You mean a server right?

Could you elaborate a bit more like you network topology? How many computers?Since you say you get one external IP, which is the computer that is acting as the host for sharing the internet connection? or do you have a NAT router?or some sort of other translation?
Which server have you installed?

In your case to publish a site you need to host the site on the main "host" computer or in case you are behind a NAT router you need to port forward to a internal IP.
So it would be better if you could provide some details.

[enoonmai]

Digen, I think what's he trying to say is that he installed a webserver on a computer in a local network with a private IP address and wants to know if people outside the computer can access it.

@valtea: Well, it depends, if its purely a internal server that is firewalled, and does not communicate with the Internet, then no. If the server is communicating with the Internet, you can find out its "external" (as you put it) IP address by going to www.ipchicken.com and then finding your site's public IP address and posting it on a forum/discussion board so that people can access the server. However, if you do not publish the IP address of that computer in puiblic, unless someone actually knows there is a webserver at that address, they cannot access it, in fact, they wont even know about its existence.
However, be warned that doing this and putting a webserver up without a firewall and properly configured rules in place is inviting unnecessary trouble for yourself. Hackers armed with port scanner programs and aware of vulnerabilities with your webserver software can use it to mount attacks on your own networks or on other networks, especially if you have a high-speed connection.

[Deep]

Originally Posted by theraven

net send "username" message ???
i thot u always use IP or the computer netbios name

username is for when the pc's are connected to a domain AFAIK !!

so for sending a msg over lan u need to have messenger service running on any/all pc's which will be partaking in it and then use for eg.

net send 192.168.0.1 "hello how are you"

quotes are required if u use spaces in your message

and dun worry afaik its ur isp sending u those msgs
and usually ISP's use NAT services . so u use a different private ip address which is translated to a public ip address via NAT
this is how they protect your pc from incoming attacks .
however u are still prone to attacks from within the lan

deep sir am i right this time ?

righto sir

cheers
Deep

[tuXian]

I tried to understand CIDR but unable to comprehend it properly can any one of you elaborate on it plz

[Deep]

hi,
to be frank i just know basics of these kind of stuff but a simple query in google gave me this site..

http://public.pacbell.net/dedicated/cidr.html

they have explained things very well..

Deep

[enoonmai]

CIDR, well, its pretty simple.

Take an IPv4 address of the form xxxxxxx:Xxx. There are 5 classes of IP addresses from A through E. And each address has two parts - a network part and a node/host part.

A Class A IP address' first bit is always 0 and the next 7 bits identify the network. The last 24 bits (the three dotted decimal numbers) are assigned to host addresses. Which translates to addresses between 1.0.0.0 to 126.0.0.0, leaving a total number of 16,744,214 unique hosts/nodes.

A Class B address has 10 as the first two bits. The first 16 bits identify the network and the last 16 bits identify the nodes, so this IP address is neatly split halfway between networks and nodes. IP addresses for this class start from 128.1.0.0 to 191.254.0.0 and can accomodate 65,534 hosts.

A Class C address has 110 as the first three bits, with the next 21 bits being the network address and the last octet is the node part. So we have IP addresses from 192.0.1.0 to 223.255.254.0 and can accomodate 254 addresses.

A Class D address has the first four bits as 1110 and is usually used for multicasting and has an address range from 224.0.0.0 to 239.255.255.254.

Class E is reserved for research and is not available for use on the Internet.

The problem comes when assigning IP address blocks to users that request them. If a company needs 300 IP addresses, they cannot go in for Class C, obviously and class B is too much, wasting 65,234 addresses. If they go in for two Class C addresses, they end up creating two domains within the same company.

To overcome this problem, the CIDR was developed. What it does simply is that enables you to use subnet masks to customize the length of the network and node addresses. So instead of the rigid 8/16/24 bits that the previous assignments used, CIDR allows you to use any bit assignment from 13 to 27 as a "prefix" on the IP address, specifying how many bits are used to specify the network address. A CIDR address is usually written as a standard IP address along with information on the prefix. So the address would usually be something like:

xxx.xxx.xxx.xxx/AB where AB is the CIDR "prefix"

So, a prefix of /27 would mean that 27 out of the 32 bits are used for the network address and the remaining 4 bits are used for the hosts, allowing you to use that address for 32 hosts. So, what usually happens is that your ISP is allotted a CIDR block depending on their size, so (just an example) while VSNL would be allotted a /13 block prefix, they would in turn allot /15 or /18 blocks to ISPs like Sify, etc. who in turn allot it to resellers, who in turn allot it to you, etc. Its not the exact way its done, I was just giving you an example.

So, you would use your CIDR block to calculate addresses for your organization. So, if you are allotted an address like, say, 10.0.0.12, and you wanted to run 1000 computers on that IP addressing scheme, you would pick the CIDR prefix of /21 that allows you 2048 hosts, then you would have a subnet of 255.255.248.0 and a total number of 8192 subnets and 2048 nodes per network. For a great subnet calculator, visit this page here:

http://www.subnetmask.info/

Hope that clears things up a little.

[digen]

Just as I was thinking of posting a long post comes your detailed reply.
^Couldnt have put it much better.Nice !!

[theraven]

yeah whats with that man?
suonds soo much like VLSM !
or is it that CIDR uses VLSM! hmmmm