Hello,
If the IP address range is being provided in North America,
the whois database at ARIN is the best source for information
of that nature.
http://whois.arin.net/whois/index.html
alternatively, if you have whois installed on a UNIX/linux box,
you can do the following:
whois [EMAIL PROTECTED]
(this is the syntax for fwhois which is installed on redhat linux)
ARIN is the organization responsible for administration and registration
of IP addresses in NA, SA, sub-saharan Africa, and the Caribbean.
APNIC (www.apnic.net) is responsible for Asia Pacific and RIPE
(www.ripe.net) is responsible for Europe. Each has their own
whois database you can query against.
Keep in mind this only reports which ISPs have been allocated a particular
block of IP addresses. If the ISP, in turn, has allocated a block to a
business customer, then it is the ISP's responsibility to SWIP that IP
block's allocation into whois. Basically, a SWIP entry says: I'm
jeff.isp.net, I have been given 10.0.0.0 by ARIN, and I've allocated
10.10.10.0 to local.business.net. Many ISP's will keep their
SWIP entries up-to-date. Some don't.
jeff
> Hi,
>
> Where would I be able to lookup an IP address range and determine who has
> ownership of it?
>
> e.g. seeing probes coming from 211.xxx.122.13 and I'd like to know where
> this is from.
>
> Thanks in advance.
> Andrew
> Andrew Thomas
> <eye2eye> digital distillers (Pty) Ltd
> office: +27-(0)21-4889820
> facsimile: +27-(0)21-4889830
> mobile: +27-(0)83-3184070
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
--
#############################################################
# Jeff Burson Human Code, Inc. #
# Network Guru 319 Congress Ave. Suite 100 #
# [EMAIL PROTECTED] Austin, TX 78701 #
# 512.477.5455 x1434 http://www.humancode.com #
#############################################################
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
