On Thu, 18 Oct 2007, J.A.C.M. (Jos) van de Ven wrote: > I tried to do a whois on this IP with no result. Then a traceroute brought > me to lt.nelson.monkey.org.
I though all IPs had whois information on one of these : arin (North America), ripe (Europe, Middle East, central asia), apnic (Asia and the Pacific region) lacnic (Latin America and the Carribean region) or afrinic (Africa). http://ws.arin.net/whois http://www.ripe.net/ http://www.apnic.net/ http://www.lacnic.net/en/index.html http://www.afrinic.net/ A arin lookup will usually point you to the rigth one if arin doesn't hold the information. Example : a arin lookup for 193.252.122.103 will return: OrgName: RIPE Network Coordination Centre OrgID: RIPE Address: P.O. Box 10096 City: Amsterdam StateProv: PostalCode: 1001EB Country: NL ReferralServer: whois://whois.ripe.net:43 NetRange: 193.0.0.0 - 193.255.255.255 CIDR: 193.0.0.0/8 NetName: RIPE-CBLK NetHandle: NET-193-0-0-0-1 Parent: NetType: Allocated to RIPE NCC NameServer: NS-PRI.RIPE.NET NameServer: NS3.NIC.FR NameServer: SUNIC.SUNET.SE NameServer: NS-EXT.ISC.ORG NameServer: SEC1.APNIC.NET NameServer: SEC3.APNIC.NET NameServer: TINNIE.ARIN.NET Comment: These addresses have been further assigned to users in Comment: the RIPE NCC region. Contact information can be found in Comment: the RIPE database at http://www.ripe.net/whois RegDate: 1992-08-12 Updated: 2005-08-03 # ARIN WHOIS database, last updated 2007-10-17 19:10 # Enter ? for additional hints on searching ARIN's WHOIS database. --Which means you just have to query RIPE for the authoritative info : inetnum: 193.252.122.64 - 193.252.122.127 netname: WANADOO-PORTAILS-BAGNOLET descr: Wanadoo Portails descr: Wanadoo Technologies descr: internet portals for multiple services country: FR admin-c: WPTR1-RIPE tech-c: WPTR1-RIPE status: ASSIGNED PA "status:" definitions mnt-by: FT-BRX source: RIPE # Filtered role: Wanadoo Portails Technical Role address: France Telecom - OPF/Portail/DOP/Hebex address: 48, rue Camille Desmoulins address: 92791 Issy Les Moulineaux Cedex 9 address: FR e-mail: [EMAIL PROTECTED] phone: +33 1 5888 6500 fax-no: +33 1 5888 6680 admin-c: WPTR1-RIPE tech-c: WPTR1-RIPE nic-hdl: WPTR1-RIPE mnt-by: FT-BRX source: RIPE # Filtered % Information related to '193.252.122.0/24AS24600' route: 193.252.122.0/24 descr: France Telecom descr: WANADOO-PORTAILS-BAGNOLET origin: AS24600 mnt-by: FT-BRX source: RIPE # Filtered http://en.wikipedia.org/wiki/Regional_Internet_Registry -ls > A visited the homepage at www.monkey.org and on the members list I saw a > "Nelson". A click on that name brought me to a weblog and guess what? I knew > this guy. He posted a message on this list a few minutes ago, what a > coincidence! > > So please Nelson, can you explain to me why your packets don't have a > standard size for ntp, or am I wrong or Snort? And why are you polling me in > the Netherlands from overseas? I could not query your server and you > appeared in my logs from October 3d till 9th, BTW. > > Thanks, > Jos van de Ven > > _______________________________________________ > timekeepers mailing list > [email protected] > https://fortytwo.ch/mailman/cgi-bin/listinfo/timekeepers > Louis http://blogtech.oc9.com _______________________________________________ timekeepers mailing list [email protected] https://fortytwo.ch/mailman/cgi-bin/listinfo/timekeepers
