[Subject Prev][Subject Next][Thread Prev][Thread Next][Subject Index][Thread Index]
how to find which ISP holds a given IP addr.block ?
hi,
My /var/log/secure shows:
Apr 4 14:48:08 aukbc3 in.ftpd[17528]: refused connect from 213.48.246.23
Mar 31 17:16:30 aukbc3 in.ftpd[2808]: refused connect from 203.79.221.51
Mar 24 02:02:00 aukbc3 in.ftpd[11448]: refused connect from 198.116.10.120
How to find out to which ISP these IP addr. belong?
Note: host/dig doesnot report any domain name for these addr.
I made traceroute to 213.48.246.23 and found the nearest router to this. Then
did a "dig" to that router which shows "ns.cableinet.net" as the
nameserver. using nslookup changed the default server to that and did a lookup
which shows:
Name: usr8379-kno.cableinet.co.uk
Address: 213.48.246.23
Now to whom I should report about this unauthorised access?
-- mks --