Warning

 

Close
Confirm Action

Are you sure you wish to do this?

Cancel Confirm
AR15.COM
3/14/2003 3:22:11 PM EDT
At work I noticed that there is a wireless network available. I don't think it is part of my company's network because it doesn't go through a firewall. I suspect it is a network from the business on the other side of the wall from us. I have an IP (it isn't in the same range as our company's IPs) and I need to know how to find out who it is registered to. I've tried a Whois but it comes back unknown.
3/14/2003 3:33:12 PM EDT
[#1]
I'm able to trace IPs through Zone Alarm but those are only ones that've been caught by the port block.

Its worth a shot to check there.

Not sure though - I'm no computer whiz - I'm certain there is someone more literate than I am.

3/14/2003 3:41:52 PM EDT
[#2]
why don't you post this in Urban Commandos? there is horsepower there that will be on it...

PS NSlookup/traceroute...
3/14/2003 3:47:21 PM EDT
[#3]
This is a form of whois, may want to give it a try   [url]http://www.arin.net/[/url]
3/14/2003 3:53:10 PM EDT
[#4]
bunghole,
Go to your "START" menu, then "PROGRAMS",then "ACCESSORIES", then "MS-DOS PROMPT". When the DOS window is open, type
"tracert" without the quotation marks, then a single space, then type in the IP number complete with the dots in thier correct place.
Press the "ENTER" key on your keyboard, then wait until the trace runs completely.
This will show you the path back to the IP/service provider and end at the PC that has that particular IP address.
It might "time out" before it does a complete trace, but you can simply run it again. It may take several attempts depending upon how "busy" the server or routers are. If the particular IP number isn't active at the time, you can "PING" the IP address and see when it becomes active again. This stuff wont work on TELNET IP's as most of them are routed through satellites. That's real in orbit communication type satellites. Experiment and have fun.
                         loose-round
3/14/2003 3:59:09 PM EDT
[#5]
I'm using OS X. OS X comes with a network utility but a lookup wasn't giving me an ISP. My brother told me to go to [url]www.network-tools.com[/url] and a lookup there did give me the ISP. [:)]
3/14/2003 4:03:01 PM EDT
[#6]
Hmmm.... Not sure what to tell you.  I am able to trace IP Freely.  I just follow the yellow line. [:D]
3/14/2003 4:06:07 PM EDT
[#7]
More than likely the ip you received is a private IP address.  Like 192.168.x.x or 10.x.x.x.  You can probably try to run a tracert and see if it shows thier router and you can probably tell who it is from that ip address.

3/14/2003 4:33:21 PM EDT
[#8]
I've got a question r.e. tracing source of emails. I keep getting these Ebay "spoof" emails trying to get  me to sign in to a fake site in order to get my Ccard info etc. I keep forwarding them to Ebay's security email but it doesn't do any good as far as stopping the emails. I did a tracert and traced the IP address from the email header 24.96.10.179 to a cable modem FWIW. How can I determine if this is a valid IP addy for the offender, an email address or the sender of this junk? I'd like to sign them up for a ton of porno sites, penis enlargement email etc.
3/14/2003 4:50:48 PM EDT
[#9]
Quoted:
I've got a question r.e. tracing source of emails. I keep getting these Ebay "spoof" emails trying to get  me to sign in to a fake site in order to get my Ccard info etc. I keep forwarding them to Ebay's security email but it doesn't do any good as far as stopping the emails. I did a tracert and traced the IP address from the email header 24.96.10.179 to a cable modem FWIW. How can I determine if this is a valid IP addy for the offender, an email address or the sender of this junk? I'd like to sign them up for a ton of porno sites, penis enlargement email etc.
View Quote


There isn't much Ebay can really do about it since the messages aren't being generated from their network or their machines.

Rule #1 of tracking down spammers is to [b]never[/b] trust the header path beyond the machine that delivered the mail to your server - it's too easily forged.

Anyhow: a quick check confirms that the netblock 24.96.0.0/17 is in fact allocated to GTE Intelligent Network in Irving TX.

Forward the complete message(s) including the headers to "[email protected]", and be prepared for them to do little if anything about it even if they do determine that machine is the source of the emails. [%|]

Your best bet is to get and use an anti-spam filter.
3/14/2003 4:54:21 PM EDT
[#10]
Quoted:
More than likely the ip you received is a private IP address.  Like 192.168.x.x or 10.x.x.x.  You can probably try to run a tracert and see if it shows thier router and you can probably tell who it is from that ip address.

View Quote


Thats what I'm thinking.
3/14/2003 5:00:00 PM EDT
[#11]
Quoted:
bunghole,
Go to your "START" menu, then "PROGRAMS",then "ACCESSORIES", then "MS-DOS PROMPT". When the DOS window is open, type
"tracert" without the quotation marks, then a single space, then type in the IP number complete with the dots in thier correct place.
Press the "ENTER" key on your keyboard, then wait until the trace runs completely.
This will show you the path back to the IP/service provider and end at the PC that has that particular IP address.
It might "time out" before it does a complete trace, but you can simply run it again. It may take several attempts depending upon how "busy" the server or routers are. If the particular IP number isn't active at the time, you can "PING" the IP address and see when it becomes active again. This stuff wont work on TELNET IP's as most of them are routed through satellites. That's real in orbit communication type satellites. Experiment and have fun.
                         loose-round
View Quote

??? What do you mean by a "telnet IP"???

pings by default time out in 20 seconds, even a high-latency link such as satellite should be able to tolerate it the vast majority of the time.  Pings won't work if the remote host has been configured to not acknowledge echo broadcasts or multicasts, or if one of the routers along the path is blocking ICMP requests.
3/14/2003 5:12:40 PM EDT
[#12]
registered Owner of the block of IP Addresses that the one you asked about is contained in=
Registrant:
GTE Intelligent Network Services (GTE2-DOM)
  5525 MacArthur Blvd.
  IRVING, TX 75038
  US

  Domain Name: GTE.NET

  Administrative Contact:
     Verizon Online  (XZTJATUWFO)  [email protected]
     Verizon Online
     5525 MacArthur Ste 320
     Irving, TX 75038
     US
     800-927-3000
  Technical Contact:
     Verizon Online  (CKNWNXEBFO)  [email protected]
     4055 Corporate Drive
     Grapevine, TX 76051
     USA
     800-927-3000

  Record expires on 06-Oct-2005.
  Record created on 05-Oct-1995.
  Database last updated on 14-Mar-2003 20:59:14 EST.

  Domain servers in listed order:

  BIGGUY.GTE.NET               206.124.64.1
  OTHERGUY.GTE.NET             206.46.254.13


Quoted:
I've got a question r.e. tracing source of emails. I keep getting these Ebay "spoof" emails trying to get  me to sign in to a fake site in order to get my Ccard info etc. I keep forwarding them to Ebay's security email but it doesn't do any good as far as stopping the emails. I did a tracert and traced the IP address from the email header 24.96.10.179 to a cable modem FWIW. How can I determine if this is a valid IP addy for the offender, an email address or the sender of this junk? I'd like to sign them up for a ton of porno sites, penis enlargement email etc.
View Quote