Results 1 to 6 of 6
-
09-06-2006, 09:58 AM #1Web Hosting Guru
- Join Date
- Dec 2005
- Location
- London
- Posts
- 279
Find the network provider of a IP
Hi all,
I've had a brute force attempt at my MSSQL server I have the following logged IP's and i want to know what ISP/Host they are with so I can get in touch with them and action taken.
Here are the IP's:
66.215.218.223
66.215.192.212
66.214.197.173
66.220.120.23
66.214.94.40
66.215.63.21
Any help appreciated.
Rgds,
ChrisWalker
-
09-06-2006, 10:08 AM #2Junior Guru
- Join Date
- May 2006
- Posts
- 244
http://whois.arin.net is what you need. Type in the IP, click Search WHOIS, and you will see who owns the blocks of IPs as well as contact information, if any.
Looks like they're all Charter Communications (abuse@charter.net) except for one which is Bend Cable Communications (who I've never heard of).
You might want to consider firewalling 66.21[4-5].*.* if you don't care about any Charter Communications guys.
-
09-06-2006, 10:22 AM #3Web Hosting Evangelist
- Join Date
- Oct 2004
- Location
- India
- Posts
- 509
Doing a whois on the ips can always reveal the provider. It is always better to contact the abuse department of the provider with proper logs so that they can take of the issue at their end.
ESC :wq!
-
09-06-2006, 10:23 AM #4Web Hosting Guru
- Join Date
- Dec 2005
- Location
- London
- Posts
- 279
All apart from one of them is Charter Communications
Lets see how quickly I get a reply from their abuse department
Im not sure about sending the log over atm as it is 16Mb in size???
Rgds,
ChrisWalker
-
09-06-2006, 11:45 AM #5Junior Guru
- Join Date
- May 2006
- Posts
- 244
Chris,
Send part of the logs - mark it as "edited for brevity" but include the significant parts. Mention that the logs in their entirety are 16MB large.
-
09-06-2006, 08:19 PM #6Web Hosting Guru
- Join Date
- Dec 2005
- Location
- London
- Posts
- 279
Cool, thanks for the help tamar
Walker