"jen" wrote in message
news:lxXEi.81214$pu2.15229@bignews1.bellsouth.net. ..
>
> "JohnWSmit" wrote ...
>>
>> My firewall shows this as a trusted local area connection. what is
>> it?
>
> Do you have a usb camera or maybe a TV card? Here's how to find out
> what is using that IP:
>
> Start>Run
> Type: cmd then click OK
> Type: ipconfig /all
> Press: Enter
>
> Scroll down until you see what's using that IP...

ipconfig only shows YOUR IP stats, not anyone else's, even if it is
your own device or service but which requires exiting to the network
to come back in on the external interface of your NIC (i.e., it
doesn't use localhost but instead your IP address). I don't recall
that 0.0.0.0/8 must be wholly constrained to be within the local host.
Seems like it could be any source host within your segment of the
network.

"netstat -a -n -o" shows the connections, their IP address and port,
and the PID of the processes using it but is a one-shot view.
SysInternals TCPview will show a list of current connections. Of
course, if you have a decent firewall, it should have a log of
connections, even localhost ones.

Some IP ranges are reserved for private networks:
10.0.0.0 to 10.255.255.255
172.16.0.0 to 172.31.255.255
192.168.0.0 to 192.168.255.255

Another reserved range for APIPA (see
http://en.wikipedia.org/wiki/Apipa), used when you can't reach the
DHCP server, is:
169.254.0.0 to 169.254.255.255

Some are reserved address blocks. See the "Reserved address blocks"
table at http://en.wikipedia.org/wiki/IPv4. The 0.0.0.0/8 range (or
0.x.x.x) is reserved for within your own network (non-routable) and
only for source nodes.