|
Home > Archive > General Discussion > February 2003 > who owns this IP addy?
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
who owns this IP addy?
|
|
| scorpyun 2003-02-21, 4:55 pm |
| i am using norton personal firewall and have received on about 3 occasions an alert that says norton just blocked a backdoor subseven trojan virus and displayed the attackers ip addy how do i find out who or what owns this ip addy?
any help is appreciated | |
| cruss575 2003-02-21, 5:06 pm |
| you can query the dns server using nslookup or [ht]dig. odds are it is not nameserved, so you can then check with arin and do a whois search. odds are it will come back with a network block from somewhere in china or russia, but it really could be assigned from anywhere.
you really shouldn't care too much where it is coming from, but that you take action and block it. I have never used that product, but any firewall product should allow you to block addresses based on the ip. I would block entire subnets (like the class C subnet that the particular attack is coming from). Personally, there is not much worthwhile coming out of either of these countries, so if you care about security, I would just exclude ALL of the subnets from these countries. | |
| scorpyun 2003-02-21, 5:12 pm |
| thank you for this very important information!
also, the product i am using has auto blocking so i am fine!
if i can help you in any way please let me know! |
|
|
|
|