Horrified at what I find in my Firewall Report

Thanks Panda.

I did check it there. It's just not an IP address that is used on the public internet, so it hasn't been assigned to anyone. Actuall spoke to a nice person at the IANA (Internet Assigned Numbers Authority), the organization that controls the assignment of these addresses. It's just a dead end using that method.

For the record and to share what I learned in the last few days, there are at least four places to look up an IP address (ARIN being one), refered collectively as WHOIS data bases. You can find them here:

www.arin.net
www.apnic.net/search/index.html>
www.lacnic.net/en/index.html>
www.ripe.net/ripencc/pub-services/db/whois/whois.htm

My quest continues. Over 200 packet attempts yesterday from that address. They must think I have the passwords to Ft. Knox!

 

Hey WFC_Exile:

I am kind of new at the whole WHOIS thing also, but here are 3 more possibilities that might help you in your quest. The Symantec link provides more info than other lookups, and MIGHT give you a few more clues, might not. The COTSE link is a combo of lookups, you might want to traverse the site for other info. And the SMARTWHOIS is a shareware download, with a 30 day free trial, and a $30 purchase price, but may not be what you are looking for... Sorry if I did not do the url's such that they link, in a hurry... Good Luck, kwester

http://security.symantec.com/SSC/Ge...d=ie&venid=sym&plfid=23&from=/ssc/vr_main.asp

http://www.cotse.com/tracetools.html

http://www.tamos.com/products/smartwhois/

 

Thanks for the other link, WCF_Exile.

Is it really neccessary to have more than one IP search place?

 

Panda,

They four are for IP's issued in the US, Latin America, Asia/Pacific, and Europe

I haven't looked up the same number on all four to see the difference in information provided.

WFC_Exile

 

Send them a VIRUS.

Don't the phrases "govt" " DeepNet" bug you?