Try this tool:
http://www.blighty.com/products/spade/
It leads you to a significant amount of information about a
given IP address.
Michael Stout wrote:
>
> Bill,
>
> How did you track down the coordinator for that particular IP address.
> We are hit numerous times by IP addresses that I would like to track
> down but reverse DNS doesn't work. Could you please post a simple HOWTO
> track down rouge IP addresses?
>
> Thanks much,
>
> Michael
>
> Bill Fox wrote:
> >
> > Hi,
> >
> > Perhaps a brief email or phone call to the coodinator (see below) may
> > help in resolving the issue (?).
> >
> > Good Luck!
> > --Bill
> >
> > United States Internet, Inc (NETBLK-SPRINT-D01840)
> > 1127 N Broadway
> > Knoxville, TN 37917
> > US
> >
> > Netname: SPRINT-D01840
> > Netblock: 208.24.64.0 - 208.24.95.255
> > Maintainer: USI
> >
> > Coordinator:
> > Duren, Jon (JD5837-ARIN) [EMAIL PROTECTED]
> > 423 540-7100
> >
> > Record last updated on 01-Oct-97.
> > Database last updated on 1-Sep-99 16:17:55 EDT.
> >
> > ----- Original Message -----
> > From: Newcomb, Kelly <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Sent: Wednesday, September 01, 1999 4:12 PM
> > Subject: FTP Attempts
> >
> > I'm getting repeated (regular intervals) ftp attempts to my firewall from an
> > address (208.24.82.140) that I can't seem to track down. While the attempts
> > are being blocked, the continuing log messages are annoying. This has been
> > going on for quite a while now, and I'm wondering if something got caught in
> > a loop and the attempts may not be malicious. (on the other hand... 8-O)
> > Any thoughts?
> >
> > TIA,
> > Kelly
> > ---
> > Kelly Newcomb, CISSP
> > Technical Risk Assessment Consultant
> > Texas Guaranteed Student Loan Corp.
> > E-Mail: [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
> >
> > -
> > [To unsubscribe, send mail to [EMAIL PROTECTED] with
> > "unsubscribe firewalls" in the body of the message.]
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
--
John Stewart
SUPSHIP San Diego
Information Systems Security Mgr
--------------------------------
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
