How come they know my IP address?

[Don]

Hi
I was wondering if I'm safe at all with outpost. A minute ago I opened an email containing a program promoting a security for attackers (Internet Alert) reading my IP address, I was surprised knowing that all my ports are stealth.
Can anyone explain it to me Pls.

Don

[root]

You didn't give us a lot of information to go on here. Could you show us a copy of the email text?
Off the top of my head, a firewall does not mask your IP, that is the job of an anonymiser. I know of no firewall that will mask your IP. I am curious about what is going on here though.
If you get all stealth results from places like GRC and PC Flank, then, yes, you are safe and the firewall is doing its job.

[David]

Hi Don,

In addition:

What e-mail client are you using?

Are you allowing HTML in your e-mail?

Program, what program? Did you receive an e-mail with an attachment and then execute the attachment?

I can think of one possible explanation at the moment. If you are using HTML mail, it is possible that an instruction could be written into the HTML to display your IP. But, I believe that you will be the only one to see this. It is probably displayed locally and not sent anywhere. Whatever the reason, my opinion is that you have absolutely nothing to worry about. Any security company that resorts to using these tricks to fool people into using their software is probably not a reputable business in the first place and you should stay away from them.

root is correct about the IP address. Everytime that you connect to a web or mail server, that server knows your IP unless you are using an Anonymizer. There are many out there if you think you want one. Although, my opinion is that they are not necessary. The Outpost firewall will provide you with exceptional protection. See this thread if you would like more information on these tools:

http://www.outpostfirewall.com/forum/showthread.php?s=&threadid=4001

Have a good day Don. :)

[Don]

Your Computer's Data Is At Risk! (SEE BELOW.)
Your computer's address is: XXXXXXXXEvery time you browse the Internet, send e-mail, or submit any private information to a web site, you broadcast your computer's unique IP Address over the Internet. With this IP address, someone can immediately begin trying to break into your computer without you even knowing it! Until now, there has been no way of telling if this has happened or any way of stopping it! Well not anymore!
YOUR COMPUTER'S ADDRESS IS: xxxxxxxx
What Can Happen To Me?

Steal Your Credit Card & Personal Information!
Read Your E-Mail!
Plant a Virus or Worm!
Steal Online Banking Information!
Delete files from your computer!
InternetALERT is an invaluable tool for you and your system. It will notify you if someone is trying to break in to your computer, stop them dead in their tracks, and even build a visual map showing you the Attacker's ISP (Internet Service Provider) allowing you to visually see where they are located and report them! You can now browse the Internet with the comfort and security of knowing that no one from the Internet can access your computer without your knowledge or permission!

It's Easy...
InternetALERT is easy-to-use! Once installed, you can go about your work without a worry. It runs silently in the background protecting you. Every time you turn on your computer, InternetALERT starts working automatically, only leaping into action when suspicious connection attempts are made to your computer.


Locate Attackers Even When You're Gone...
InternetALERT is more than just protection against Internet Intruder's, it allows you to track down your Intruder's ISP (Internet Service Provider) contact information and report the attack. This allows you to contact the Intruder's ISP and make them aware that someone on their network has tried to attack your computer. In most cases, they have the power to find out who the Intruder is and prevent any future attacks. With the InternetALERT built in 'Attack Log', you can know the date, time, IP Address, and Port Number used by the Intruder in the attack.


Map Attacker's ISP Location:
InternetALERT can actually track down and give you a visual map of your Intruder's ISP location, allowing you to see where your attacker came from! This allows you to see where in the world your attacker is located. NOTE: This is a map of the ISP (Internet Service Provider) that the attacker is using to get their Internet access.


What People Are Saying About InternetALERT...
"So far my computer system has been attacked twice, and InternetALERT has picked up on it. Both times I was able to notify the offending companies to shut down the hackers. I am VERY impressed with this software package, and will continue to look at your company for new and exciting products. Keep up the great work!"

- Frank Leibsly - MMR Software

"Thanks for such a great program! InternetALERT detected and disabled before any harm was done. I had been hacked once before I got Internet Alert and it took weeks to get things back to normal. This time your program caught the hacker! I'm so impressed I'm going to put your link on my "cool links page" and maybe get you some business."

- Mari Hetfield - NH.

"Since I downloaded InternetALERT my machine has had an attempted hack, twice. Since I have had the program less than 4 days, I wonder how many times my machine has been hacked in the past. I not only knew of the STOPPED attack, but was able to notify the right person to stop the attacker. it would be foolish for anyone who is on the internet, not to have their machine protected with your system. Please keep up the good work. it is awful their are so many bad people in the world, but wonderful that people like you, take a great part in protecting people everywhere. Thanks so much!"

- Ron Combs - Very satisfied customer!

Download & Protect Yourself Against Internet Attackers Now - $49 (1 Year Subscription.)

For a limited time, you may now download and start protecting yourself against Internet Attackers for only $49 per year! Your InternetALERT Subscription includes:

1 Full Year of Protection
7 day a week technical support
Future Developments - FREE!
You're now minutes away from protecting yourself!

[root]

I have a suspicion this is the worst kind of trickery. There are several ways to have your IP show up like that, depending on what is enabled on your computer. Almost all that I am aware of are just showing you your own information and cannot see it themselvel.
Was this an html email?

[David]

Hi Don,

Originally posted by Don
Your Computer's Data Is At Risk! (SEE BELOW.)
Your computer's address is: XXXXXXXXEvery time you browse the Internet, send e-mail, or submit any private information to a web site, you broadcast your computer's unique IP Address over the Internet. With this IP address, someone can immediately begin trying to break into your computer without you even knowing it! Until now, there has been no way of telling if this has happened or any way of stopping it! Well not anymore!
YOUR COMPUTER'S ADDRESS IS: xxxxxxxx
What Can Happen To Me?

Steal Your Credit Card & Personal Information!
Read Your E-Mail!
Plant a Virus or Worm!
Steal Online Banking Information!
Delete files from your computer!
InternetALERT is an invaluable tool for you and your system. It will notify you if someone is trying to break in to your computer, stop them dead in their tracks, and even build a visual map showing you the Attacker's ISP (Internet Service Provider) allowing you to visually see where they are located and report them! You can now browse the Internet with the comfort and security of knowing that no one from the Internet can access your computer without your knowledge or permission!

RUBBISH......Yes, when you are connected to the internet, your IP address is known, but only to the websites that you visit, your ISP, and any other server connection that you make. But, you are not broadcasting your IP address in general over the internet. These people give a completely inaccurate description of how a security breach might take place. The attacker has to find you first. This means that he has to be scanning the same block of IP addresses that you are using. In which case, he will not see your PC, because it is steathed. Additionally, most times the attacker is only scanning certain ports that may be associated with exploitable services or known trojan servers. This company is saying that hackers can do a lot of bad things and indeed they can. But, I will tell you that the most common reasons for infiltration (in my opinion) are:

1. Misconfiguration of services and not keeping up with security updates for the OS.

2. Opening attachments or e-mail from an unknown source. Your best defense here is your Anti-Virus or Anti-Trojan software.

3. Trojan server is packaged with legitimate application that is posted to a crack site. The user installs the legitimate program and the trojan server gets installed along with it.

4. Malicious script in a web page. This can be controlled through proper configuration of IE and Outpost. Actually this one should not be a problem as long as the user avoids sites of questionable origin or legitimacy.

Finally, saying that there has never been a way to stop hackers or to track them until now is an outright lie. The fact is that most firewalls offer similar services or features.

If you have a good Anti-Virus, Firewall, and maybe Anti-Trojan and are keeping those applications and your OS up to date, you should not have any issues.

Originally posted by Don
It's Easy...
InternetALERT is easy-to-use! Once installed, you can go about your work without a worry. It runs silently in the background protecting you. Every time you turn on your computer, InternetALERT starts working automatically, only leaping into action when suspicious connection attempts are made to your computer.

Beware of products that sound this easy to use.

Originally posted by Don
Locate Attackers Even When You're Gone...
InternetALERT is more than just protection against Internet Intruder's, it allows you to track down your Intruder's ISP (Internet Service Provider) contact information and report the attack. This allows you to contact the Intruder's ISP and make them aware that someone on their network has tried to attack your computer. In most cases, they have the power to find out who the Intruder is and prevent any future attacks. With the InternetALERT built in 'Attack Log', you can know the date, time, IP Address, and Port Number used by the Intruder in the attack.

Locating attackers??? Absolutely worthless unless the person hacking you is a complete amateur. A hacker will route his traffic through several IPs so that you will never see the attack coming from the hackers true IP. If you report the IP that you are seeing, then there is a chance, you will be reporting another innocent victim whose PC is just being used to route traffic. Also, although I do have some entries in my log after being online a while, I have not reported an attack to my ISP in over 5 years. Most of what you will see are just random scans or errors and now worth reporting. The key is to look for patterns from a single IP address. That is how you will know if you are singled out for an attack.

Originally posted by Don
Map Attacker's ISP Location:
InternetALERT can actually track down and give you a visual map of your Intruder's ISP location, allowing you to see where your attacker came from! This allows you to see where in the world your attacker is located. NOTE: This is a map of the ISP (Internet Service Provider) that the attacker is using to get their Internet access.

See above. If the attacker is routing through several PCs and servers, you will only see a location of the last PC that the traffic is being routed through. I have used mapping tools, but they are only a novelty and not a serious security tool. I cannot think of a purpose for this tool.

If you want clarification on any of my comments, please ask. There are many users on this board and you may hear some alternative opinions. Talk to you later. :)

[Don]

No, Just in case I have something enable which I'm not aware of
Would you mind telling me which I'm suppose to disable so that my computer is secured.
Thanks

[grey ghost]

Originally posted by Don
No, Just in case I have something enable which I'm not aware of
Would you mind telling me which I'm suppose to disable so that my computer is secured.
Thanks

Hi

That program is supported by Bonzi.com
It is one of the biggest spyware companies on the Internet.

First go to Lavasoft and download there free spyware remover program Ad-Aware.

http://www.lavasoft.nu/index.html

If you have programs that run ads while you use them they may stop working when it cleans up your system.

Then you need to tighten up your security and privacy settings on your browser and outpost.

Ad-Aware is a good start.

Regards

[Don]

Well, That why I was surprised when I saw my own Ip, I have adware, I have antivirus, I always check for updates, I also have a cleanup, so I beleive I am taking care of my computer.

[David]

Don,

There is no cause for alarm because you saw your IP address in an e-mail. As root has said. These things are just magic. It is no way a demonstration that your PC is somehow vulnerable. :)

[root]

Hi Don. Open your browser to a new blank window. Then put this "file://localhost/c:/ " , no quotes, in the url address box and hit enter. Surprise! Look familiar?
Commands such as this can be burried in HTML email and email that will allow scripting and ActiveX.
I have scripting disabled on my computer as there is no need for it. I use Opera browser because it is the closest to bug free you can get. I use Poco email client. It uses its own engines to render fancy email and is not subject to worms and other malware.
You have made a good start going with Outpost. Now consider some non MS applications to further enhance your security.
Please!!:D
You can find some great general security information at Wilders Org if you want to come join me over there. I'm a mod in the firewall section for Paul.
http://www.wilderssecurity.com/

[grey ghost]

Hi

root has good advice. Wilders has lots of information and help available for privacy and security issues.

If you are using IE there are a lot of settings you can tweak to help keep your privacy. :)

Regards

[Danil]

Open your browser to a new blank window. Then put this "file://localhost/c:/ " , no quotes, in the url address box and hit enter. Surprise! Look familiar?
Commands such as this can be burried in HTML email and email that will allow scripting and ActiveX.That's what I through about when started to read this thread.

I already faced with such emails that first frighten unexperienced users and then promote some software for their protection...