Sortof, you can get the top of the blocks from arin.net (American Registry of Ineternet Numbers)
On Fri, 12 Oct 2001, John Hunter wrote: > > I am busy sifting through my iptables logs and have what looks like a > distributed port scan. A bunch of TCP packets sent to high numbered > ports (>1024) from 5 or 6 different IPs. Each IP is in the same > subnet 205.188.162.* and each originated from the same src port 1028. > My first guess is that this is a scanner designed to thwart automated > detection schemes. > > I am new to the game of log browsing so I don't know if there could be > an innocent explanation for this but it looks suspicious. > > Is there any way to get the ISP information for a given subnet, so I > can file a complaint if I want? > > JDH > -- /* Sach Jobb [EMAIL PROTECTED] %s/windows/linux/g */ "As far as i'm concerned the two biggest hassles in the world revolve around DNS and girlfriends." -- (name undisclosed to protect the innocent)
