nslookup, whois, etc.... What else can I use to trace an ip? Same IP trying to mess with my server!

[tabernack]

What other tools can I use other than nslookup and whois to trace an ip. I have this ip that keeps trying to access my server and I want to nail him to the wall. Any help would be greatly appreciated.

 

[Supergax]

Why don't you just do an whois on it and call the technical or administrative contact listed with the IP. If is an isp and the IP is static they can find out what customer is doing it, as well as if the customer has a dynamic. I work for an ISP and we can find out what customers were assigned what IP addresses when dialing in.

 

[tabernack]

I can't do a whois with the ip address. I need the domain name for that. The ip address I am trying to trace is 209.75.219.165. When I perform a nslookup it returns:

can't find 209.75.219.165: Non-existent host/domain

Any ideas?

 

[GT1999]

Do you have a router/firewall set up? I'm guessing you do since you know the IP, etc, but I figured I should ask so we can get details on that anyway.

On the side, how do you do a whois? I'm used to the tracert command in windows, and traceroute in linux, but how do you do a whois? whois domain.com doesn't seem to work.

 

[BCYL]

Here a link you can try:
SpamCop

 

[Supergax]

Actually, there is a way to do a whois and find out, my bad, I didnt' explain, I was tired. If you have shell access from someplace that has whois you can type whois -h whois.arin.net 209.75.219.165, or if you can't, go to ARIN, and type in the IP addy in the whois window. I did it with the IP you gave, and found the following:

ATMNET (NETBLK-ATMNET-BLK4) ATMNET-BLK4 209.75.0.0 - 209.75.255.255
Installnet Inc. (NETBLK-INET-NET-1) INET-NET-1 209.75.216.0 - 209.75.219.255

This shows that the IP is owned by either ATMNET or Installnet Inc. If you do a whois on those two, it shows the both point to ATMNET being the owner of Installnet Inc. I got the following email addresses through ARIN: noc@ATMNET.NET & vansax@ATMNET.NET. NOC will go to their network operations staff and vansax goes to a James Van Baalen, listed as the coordinator. Their phone number comes up as : (619)643-1888. If you try to go to the website www.atmnet.com, it routes to verio.com. So you may want to also contact verio about this. Hope it helps.

 

[tabernack]

Thanks for your help.

 

[Cable God]

Yea, I use arin.net quite a bit as well Supergax. Quite handy....