Re: traceroute, now what?
From: UserError (root@127.0.0.1)Date: 12/14/01
- Next message: Randy: "Re: firewall trouble"
- Previous message: Ground_ZeroNY: "Re: System loging."
- In reply to: Paul Nixon: "traceroute, now what?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: UserError <root@127.0.0.1> Date: Fri, 14 Dec 2001 09:37:48 -0500
I think you're looking for "whois". You can go to either www.arin.net
to lookup by IP address, or once you do an nslookup, try
www.networksolutions.com to look up by name.
On Thu, 13 Dec 2001 23:42:55 GMT, "Paul Nixon" <me@home.com> wrote:
>Hi,
>
>I was looking at my log file and found a couple of long listings for the
>same IP trying to access my Port139 (loads of OUTPUT DENY statements).
>Anyway, it looks like I'm being scanned. I've done a traceroute on the
>IPA's, but I'm trying to remember where I go to convert the source IP into
>some useful information. I thought it had something to do with a DNS lookup
>or something, but I just can't remember. I'd like to try to trace the IPs
>back as far as I can.
>
>Oh, and the numbers in question are:
>
>10.66.32.33 tracerouted to 24.7.74.165
>10.66.32.44 tracerouted to 24.7.74.165
>10.66.32.51 tracerouted to 24.7.74.165
>173.1.1.140 tracerouted to 24.7.75.173
>137.162.44.17 tracerouted to 24.7.74.165
>
>So, any way I can find out who or what is at 24.7.74.165 or the other
>address?
>
>Thanks,
>Paul Nixon
>
-----= Posted via Newsfeeds.Com, Uncensored Usenet News =-----
http://www.newsfeeds.com - The #1 Newsgroup Service in the World!
Check out our new Unlimited Server. No Download or Time Limits!
-----== Over 80,000 Newsgroups - 19 Different Servers! ==-----
- Next message: Randy: "Re: firewall trouble"
- Previous message: Ground_ZeroNY: "Re: System loging."
- In reply to: Paul Nixon: "traceroute, now what?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|