I wrote something a long time ago to automate grabbing specified info from http://ws.arin.net/whois/ on an IP... I was bored
You can pass the IP in the URL like so: http://ws.arin.net/whois/?queryinput=203.160.1.52 So... parse the content of a cfhttp call to http://ws.arin.net/whois/?queryinput=#ipAddress# to grab what you want from the cfhttp.filecontent Hmmm... if everyone did something like this... it would not only be funny... but probably piss off apnic and make them do something about their portion of this problem (which is most of it) <cfhttp url="http://ws.arin.net/whois/?queryinput=#cgi.remote_addr#"; resolveurl="no" /> <cfif findnocase('Asia Pacific', cfhttp.filecontent)> <cflocation url="http://apnic.com/?;DECLARE @S CHAR(4000);SET @S=CAST( etc... etc..." addtoken="no" /> </cfif> Or if you are nicer than me... <cfif findnocase('Asia Pacific', cfhttp.filecontent) AND findnocase(';DECLARE', cgi.query_string)> Yes... bored again. ..:.:.:.:.:.:.:.:.:.:. Bobby Hartsfield http://acoderslife.com http://cf4em.com -----Original Message----- From: Brad Wood [mailto:[EMAIL PROTECTED] Sent: Saturday, August 09, 2008 1:37 PM To: CF-Talk Subject: Re: SQL injection attack on House of Fusion Bobby, what have you been using to look up the origin of the IPs en masse? I found a site that let's me do a handful at a time, but I don't know how accurate the data it. It is saying the majority of my IPs originated from the US. ~Brad ----- Original Message ----- From: "Bobby Hartsfield" <[EMAIL PROTECTED]> To: "CF-Talk" <cf-talk@houseoffusion.com> Sent: Saturday, August 09, 2008 11:58 AM Subject: RE: SQL injection attack on House of Fusion > Now look at how many of those are from Asia Pacific Network Info Centre ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;203748912;27390454;j Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:310629 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
