The internic or net solutions doesn't do many nets any more. The best is
to do:
whois -h whois.arin.net host.net
This may not find it, or may say that the network is assigned to ripe or
apnic. Then
you can try:
whois -h whois.ripe.net
or
whois -h whois.apnic.net
arin is American Registry of Internet Numbers
apnic is Asian/Pacific Network Information Center
ripe is Reseau IP Europeens (European NIC)
Don
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
Sent: Wednesday, October 25, 2000 9:11 AM
To: [EMAIL PROTECTED]
Subject: RE: Unidentifiable Host
Thanks everyone for helping me out on this. I will contact them and see
what comes of it. I don't know why I was unable to track it down. I used
network solutions whois which returned "unkown host", my providers DNS
server could not resolve it, and when I did a traceroute it did not
identify it.
Thanks,
Lee Herbst
Fernando
Cardoso To:
"'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]>
<fernando@bn. cc: [EMAIL PROTECTED]
pt> Subject: RE: Unidentifiable
Host
10/25/00
08:56 AM
It's not unassigned. Here's what I've got from whois.arin.net:
RYC, Incorporated (NETBLK-UU-208-225-214-64-D1)
10700 Windridge Drive
Austin, TX 78759
US
Netname: UU-208-225-214-64-D1
Netblock: 208.225.214.64 - 208.225.214.95
Coordinator:
Cunningham, Fred (FC280-ARIN) [EMAIL PROTECTED]
512-258-5470
Record last updated on 04-Aug-1998.
Database last updated on 25-Oct-2000 07:00:04 EDT.
_________________________________________________________
Fernando Cardoso Phone: +351 21 7982186
Network Administrator Fax: +351 21 7982185
National Library E-mail: [EMAIL PROTECTED]
Portugal PGP ID: 28551CB8
>
>
> We have been having problems with SMTP through our firewall
> lately. Going
> through the logs, I have found a specific IP address
> associated with most
> SMTP errors in the log. When I try to do a traceroute or a
> whois on this
> IP address I get an unknown host or an unknown network. It
> seems to be an
> unassigned IP address, one that doesn't belong to an assigned
> block. I
> have specifically blocked this IP address and have turned on
> block invalid
> originators (we are already blocking relays), but I don't
> know if these
> things will stop whoever from access this port on our
> firewall and causing
> us problems. Time will tell. My questions are, how can we
> track down the
> user of this IP address? Is it even possible? How many
> unassigned blocks
> exist? Any suggestions on protecting ourselves from these IP
> addresses?
> Our firewall is IBM SecureWay Firewall 4.11 and the IP
> address in question
> is 208.225.214.81 (just in case I was doing something wrong
> in looking up
> the address).
>
> Thanks,
>
> Lee Herbst
>
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
