Bob McClure Jr wrote: > On Tue, Apr 24, 2007 at 09:03:51PM -0700, Marc Perkel wrote: >> Is there an algorithm that one can feed an IP address into and return >> the email address of the responsible person for the IP to report >> spam to? > > There is the command-line "whois", as well as the ARIN web site > > http://www.arin.net/whois/index.html > <snip>
I have been using a tool called Sam Spade since '99 or so. Quick and works pretty well although it still has the same problems outlined earlier in the thread as all it does is whois lookups. But on the plus side it's really quick and gives you the opportunity to either go with a "magic" lookup which tries to auto-determine the correct whois server or it lets you select the server you want to hit. I use it not only for these kinds of lookups, but it's also very useful when going through my logs looking at questionable connections. When doing any kind of lookups I always start with this tool. I really like the fact that if there is a subnet block in the whois returned, you can simply click on any of the subnets and it will do a lookup on that subnet. For that matter you have the ability to click on any blue link in the returned data and it will pre-fill that into the lookup box to do another lookup... very useful. It also attempts to do lookups at abuse.net although this is only sometimes helpful. AFAIK it only runs on Windose machines but there may be a *nix version out there somewhere. A quick google search turned up http://www.softpedia.com/get/Network-Tools/Network-Tools-Suites/Sam-Spade.sh tml HTH Kind regards, Ken Ken Goods Network Administrator
