PDA

View Full Version : ? for you FW pros. Track down IP reassignments


jrx10
May 7th, 2008, 12:29 AM
Every so often I get an strange inbound or outbond that I want to check out. A lot, but not all, of the info about an IP just shows the server and doesn't give me anything about the reassignment. An example is (and this is only an example), is the search for ImageShack IP address. It brings up "Performance Systems Intl" Washington, D.C. NetName: PSINETA. It also says "Comment: Reassignment information for this block can be found at
Comment: rwhois.cogentco.com 4321". In this particular case, I know, or think ??? it's an ImageShack address, but you couldn't tell it by looking up the IP. Is there any way to look up these reassignments within a listed server to actually find out where this outbound is going/inbound coming from? PSI doesn't tell me jack, but is there any way to read through the BS and get to these reassignments, in this particular example...ImShack? thx

jrx10
May 9th, 2008, 12:18 AM
Bump. Anyone? Is this a closely-guarded 'net secret or just not possible/not available to general web surfers to look beyond these vague ARIN entries you get from looking up/tracking down a strange logged inbound/outbound IP? Now-a-days with everyone preaching 'net security, it would seem like there would be a mandatory & constantly updated encyclopedia of these 'net server website IP reassignments, somewhere? Another example is WSF.....you get Reliance Globalcom Services, Inc RGS-BLK7 (NET-65-175-0-0-1)
65.175.0.0 - 65.175.63.255
Freeze Frame Graphics YIPS-FREEZE-S01217006 (NET-65-175-38-0-1)
65.175.38.0 - 65.175.38.255 and absolutely nothing directly relating to WSF. ???

Stem
May 9th, 2008, 01:27 AM
Rather than using a Whois which will normally only show the block. Use a reverse DNS, some info http://en.wikipedia.org/wiki/Reverse_DNS_lookup

Lookups can be made (as example) here:- http://www.dnsstuff.com/


- Stem