Re: ARIN or other IP lookup?

2010-09-10 Thread Ben Scott 
On Fri, Sep 10, 2010 at 2:48 PM,   wrote:
> 2010/9/10 Ben Scott 
>>  Being a command-line junkie, I use the "WHOIS.EXE" utility from
>> Sysinternals, which works much like the "whois" command from *nix.
>
> Why don't you take into consideration www.dnsstuff.com
> Part of their services are free.

(1) Not command-line.
(2) It's a website, which may be down, unreachable, change, move, die, etc.
(3) "Part ... free" strongly implies "part paid".  The local tools I
use are completely free and will not decide to start charging for
other stuff some day.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: ARIN or other IP lookup?

2010-09-10 Thread roberto . grippi 
Why don't you take into consideration www.dnsstuff.com
Part of their services are free.

Roberto Grippi


2010/9/10 Ben Scott 

> On Fri, Sep 10, 2010 at 11:54 AM,   wrote:
> > A few weeks ago, ARIN had a very nice web site.  I could open my book
> mark,
> > enter the IP address (copy and paste) of a spam or scan source, and see
> > where it came from.
>
>   Being a command-line junkie, I use the "WHOIS.EXE" utility from
> Sysinternals, which works much like the "whois" command from *nix.
>
> http://technet.microsoft.com/en-us/sysinternals/bb897435.aspx
>
>  For example:
>
> BSCOTT>whois  12.15.29.130
>
> Whois v1.01 - Domain information lookup utility
> Sysinternals - www.sysinternals.com
> Copyright (C) 2005 Mark Russinovich
>
> Connecting to ORG.whois-servers.net...
>
> Domain ID:D1494537-LROR
> Domain Name:ASPCA.ORG
> Created On:06-Jan-1996 05:00:00 UTC
> Last Updated On:06-Jan-2010 01:23:40 UTC
> Expiration Date:05-Jan-2011 05:00:00 UTC
> Sponsoring Registrar:TierraNet Inc. dba DomainDiscover (R86-LROR)
> Status:CLIENT TRANSFER PROHIBITED
> Registrant ID:TNTN-290102
> Registrant Name:Ayumi Stubbs
> Registrant Organization:The American Society for the Prevention of Cruelty
> to A
> Registrant Street1:424 E. 92ndSt
> [...cut...]
>
> -- Ben
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
>


-- 
Dr. Roberto Grippi

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: ARIN or other IP lookup?

2010-09-10 Thread Ben Scott 
On Fri, Sep 10, 2010 at 11:54 AM,   wrote:
> A few weeks ago, ARIN had a very nice web site.  I could open my book mark,
> enter the IP address (copy and paste) of a spam or scan source, and see
> where it came from.

  Being a command-line junkie, I use the "WHOIS.EXE" utility from
Sysinternals, which works much like the "whois" command from *nix.

http://technet.microsoft.com/en-us/sysinternals/bb897435.aspx

  For example:

BSCOTT>whois  12.15.29.130

Whois v1.01 - Domain information lookup utility
Sysinternals - www.sysinternals.com
Copyright (C) 2005 Mark Russinovich

Connecting to ORG.whois-servers.net...

Domain ID:D1494537-LROR
Domain Name:ASPCA.ORG
Created On:06-Jan-1996 05:00:00 UTC
Last Updated On:06-Jan-2010 01:23:40 UTC
Expiration Date:05-Jan-2011 05:00:00 UTC
Sponsoring Registrar:TierraNet Inc. dba DomainDiscover (R86-LROR)
Status:CLIENT TRANSFER PROHIBITED
Registrant ID:TNTN-290102
Registrant Name:Ayumi Stubbs
Registrant Organization:The American Society for the Prevention of Cruelty to A
Registrant Street1:424 E. 92ndSt
[...cut...]

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: ARIN or other IP lookup?

2010-09-10 Thread Angus Scott-Fleming 
On 10 Sep 2010 at 10:54, richardmccl...@aspca.org  wrote:

> Greetings! 
> 
> A few weeks ago, ARIN had a very nice web site. I could open my book 
> mark, enter the IP address (copy and paste) of a spam or scan source, 
> and see where it came from. It would reference me to other similar 
> agencies (RIPE, APNIC, etc) which I could then open, paste in the same 
> IP, and finish chasing. 
> 
> They (ARIN) seem to have change things a bit, and I can't figure out how 
> to search for IPs anymore. It almost looks like one needs to take out 
> some sort of subscription to search IP addresses now. 

Here's a bookmarklet which might help.  Highlight an IP address on a page and 
click the bookmarklet in your address bar:


= Included Stuff Follows =

javascript:if(frames.length>0){F='%20(Open%20frame%20in%20new%20window%20first.)'}else{F=''}if(window.getSelection){Q=window.getSelection();}else%20if(document.getSelection){Q=document.getSelection();}else%20if(document.selection){Q=document.selection.createRange().text;}if(!Q%20||%20Q%20==%20''){void(Q=prompt('No%20text%20has%20been%20selected.'+F+'%20Search%20for:',''))};if(Q%20&&%20Q%20!=%20''){location.href='http://www.ip-adress.com/whois/'+encodeURIComponent(Q);}

= Included Stuff Ends =

Bookmarklet is all one line, you may need to copy and paste into a text editor 
to unwrap ;-)

--
Angus Scott-Fleming
GeoApps, Tucson, Arizona
1-520-290-5038
Security Blog: http://geoapps.com/





~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: ARIN or other IP lookup?

2010-09-10 Thread Richard Stovall 
Removing the links to the other registries is what I hate most about the new
site.

The good news is that APNIC's Whois lookup seems to work for most, if not
all, of the other registries.  Maybe we should just default to that one
instead of ARIN.

http://wq.apnic.net/apnic-bin/whois.pl



On Fri, Sep 10, 2010 at 12:04 PM,  wrote:

>
> Thanks!  I guess I'd tried one page too far at the site.  When I "seached"
> on the blank on that page, I got a response that it could find no documents
> with that string of text.
>
> Anyway, it says that IP address is with APNIC.  They (ARIN) no longer has a
> functional link to APNIC.  They have a hyperlink saying "APNIC".  Clicking
> this, though, only brings one to another page within ARIN.  It tells you
> that APNIC is officed in Australia.
>
> Someone worked really hard to make their new web site hateful!
> Thanks again...
> --
> richard
>
> Richard Stovall  wrote on 09/10/2010 10:56:55 AM:
>
> > Way up in the upper right, put the ip you're interested in into the
> > box labeled "SEARCH Whois".
> >
> > I also hate their new website.
>
> > On Fri, Sep 10, 2010 at 11:54 AM,  wrote:
> >
> > Greetings!
> >
> > A few weeks ago, ARIN had a very nice web site.  I could open my
> > book mark, enter the IP address (copy and paste) of a spam or scan
> > source, and see where it came from. It would reference me to other
> > similar agencies (RIPE, APNIC, etc) which I could then open, paste
> > in the same IP, and finish chasing.
> >
> > They (ARIN) seem to have change things a bit, and I can't figure out
> > how to search for IPs anymore.  It almost looks like one needs to
> > take out some sort of subscription to search IP addresses now.
> >
> > Any hints, etc here?   Thanks...
> > --
> > Richard D. McClary
> > Systems Administrator, Information Technology Group
> > ASPCA®
> > 1717 S. Philo Rd, Ste 36
> > Urbana, IL  61802
> >
> > richardmccl...@aspca.org
> >
> > P: 217-337-9761
> > C: 217-417-1182
> > F: 217-337-9761
> > www.aspca.org
> >
> > The information contained in this e-mail, and any attachments
> > hereto, is from The American Society for the Prevention of Cruelty to
> Animals®
> > (ASPCA®) and is intended only for use by the addressee(s) named
> > herein and may contain legally privileged and/or confidential
> > information. If you are not the intended recipient of this e-mail,
> > you are hereby notified that any dissemination, distribution,
> > copying or use of the contents of this e-mail, and any attachments
> > hereto, is strictly prohibited. If you have received this e-mail in
> > error, please immediately notify me by reply email and permanently
> > delete the original and any copy of this e-mail and any printout thereof.
>
> >
> > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> > ~   ~
> >
> > ---
> > To manage subscriptions click here: http://lyris.sunbelt-software.
> > com/read/my_forums/
> > or send an email to listmana...@lyris.sunbeltsoftware.com
> > with the body: unsubscribe ntsysadmin
> >
> > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> > ~   ~
> >
> > ---
> > To manage subscriptions click here: http://lyris.sunbelt-software.
> > com/read/my_forums/
> > or send an email to listmana...@lyris.sunbeltsoftware.com
> > with the body: unsubscribe ntsysadmin
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: ARIN or other IP lookup?

2010-09-10 Thread James Winzenz 
Sam Spade!


From: richardmccl...@aspca.org 
Sent: Friday, September 10, 2010 9:04 AM
To: NT System Admin Issues 
Subject: Re: ARIN or other IP lookup?



Thanks!  I guess I'd tried one page too far at the site.  When I "seached" on 
the blank on that page, I got a response that it could find no documents with 
that string of text. 

Anyway, it says that IP address is with APNIC.  They (ARIN) no longer has a 
functional link to APNIC.  They have a hyperlink saying "APNIC".  Clicking 
this, though, only brings one to another page within ARIN.  It tells you that 
APNIC is officed in Australia. 

Someone worked really hard to make their new web site hateful! wrote on 09/10/2010 10:56:55 AM:

> Way up in the upper right, put the ip you're interested in into the 
> box labeled "SEARCH Whois". 
> 
> I also hate their new website.

> On Fri, Sep 10, 2010 at 11:54 AM,  wrote: 
> 
> Greetings! 
> 
> A few weeks ago, ARIN had a very nice web site.  I could open my 
> book mark, enter the IP address (copy and paste) of a spam or scan 
> source, and see where it came from. It would reference me to other 
> similar agencies (RIPE, APNIC, etc) which I could then open, paste 
> in the same IP, and finish chasing. 
> 
> They (ARIN) seem to have change things a bit, and I can't figure out
> how to search for IPs anymore.  It almost looks like one needs to 
> take out some sort of subscription to search IP addresses now. 
> 
> Any hints, etc here?   Thanks...
> -- 
> Richard D. McClary 
> Systems Administrator, Information Technology Group 
> ASPCA® 
> 1717 S. Philo Rd, Ste 36 
> Urbana, IL  61802 
>   
> richardmccl...@aspca.org 
>   
> P: 217-337-9761 
> C: 217-417-1182 
> F: 217-337-9761 
> www.aspca.org 
>   
> The information contained in this e-mail, and any attachments 
> hereto, is from The American Society for the Prevention of Cruelty to Animals®
> (ASPCA®) and is intended only for use by the addressee(s) named 
> herein and may contain legally privileged and/or confidential 
> information. If you are not the intended recipient of this e-mail, 
> you are hereby notified that any dissemination, distribution, 
> copying or use of the contents of this e-mail, and any attachments 
> hereto, is strictly prohibited. If you have received this e-mail in 
> error, please immediately notify me by reply email and permanently 
> delete the original and any copy of this e-mail and any printout thereof. 
>   
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
> 
> ---
> To manage subscriptions click here: http://lyris.sunbelt-software.
> com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin 
> 
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~
> 
> ---
> To manage subscriptions click here: http://lyris.sunbelt-software.
> com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: ARIN or other IP lookup?

2010-09-10 Thread RichardMcClary 
Thanks!  I guess I'd tried one page too far at the site.  When I "seached" 
on the blank on that page, I got a response that it could find no 
documents with that string of text.

Anyway, it says that IP address is with APNIC.  They (ARIN) no longer has 
a functional link to APNIC.  They have a hyperlink saying "APNIC". 
Clicking this, though, only brings one to another page within ARIN.  It 
tells you that APNIC is officed in Australia.

Someone worked really hard to make their new web site 
hateful! wrote on 09/10/2010 10:56:55 AM:

> Way up in the upper right, put the ip you're interested in into the 
> box labeled "SEARCH Whois".
> 
> I also hate their new website.

> On Fri, Sep 10, 2010 at 11:54 AM,  wrote:
> 
> Greetings! 
> 
> A few weeks ago, ARIN had a very nice web site.  I could open my 
> book mark, enter the IP address (copy and paste) of a spam or scan 
> source, and see where it came from. It would reference me to other 
> similar agencies (RIPE, APNIC, etc) which I could then open, paste 
> in the same IP, and finish chasing. 
> 
> They (ARIN) seem to have change things a bit, and I can't figure out
> how to search for IPs anymore.  It almost looks like one needs to 
> take out some sort of subscription to search IP addresses now. 
> 
> Any hints, etc here?   Thanks...
> -- 
> Richard D. McClary 
> Systems Administrator, Information Technology Group 
> ASPCA® 
> 1717 S. Philo Rd, Ste 36 
> Urbana, IL  61802 
>   
> richardmccl...@aspca.org 
>   
> P: 217-337-9761 
> C: 217-417-1182 
> F: 217-337-9761 
> www.aspca.org 
>   
> The information contained in this e-mail, and any attachments 
> hereto, is from The American Society for the Prevention of Cruelty to 
Animals®
> (ASPCA®) and is intended only for use by the addressee(s) named 
> herein and may contain legally privileged and/or confidential 
> information. If you are not the intended recipient of this e-mail, 
> you are hereby notified that any dissemination, distribution, 
> copying or use of the contents of this e-mail, and any attachments 
> hereto, is strictly prohibited. If you have received this e-mail in 
> error, please immediately notify me by reply email and permanently 
> delete the original and any copy of this e-mail and any printout 
thereof. 
>   
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
> 
> ---
> To manage subscriptions click here: http://lyris.sunbelt-software.
> com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
> 
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
> 
> ---
> To manage subscriptions click here: http://lyris.sunbelt-software.
> com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: ARIN or other IP lookup?

2010-09-10 Thread Michael B. Smith 
I use a free little tool called "Whois View" from Softnik Technologies - so I 
don't have to deal with the changing websites. :-P

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: richardmccl...@aspca.org [mailto:richardmccl...@aspca.org]
Sent: Friday, September 10, 2010 11:54 AM
To: NT System Admin Issues
Subject: ARIN or other IP lookup?


Greetings!

A few weeks ago, ARIN had a very nice web site.  I could open my book mark, 
enter the IP address (copy and paste) of a spam or scan source, and see where 
it came from. It would reference me to other similar agencies (RIPE, APNIC, 
etc) which I could then open, paste in the same IP, and finish chasing.

They (ARIN) seem to have change things a bit, and I can't figure out how to 
search for IPs anymore.  It almost looks like one needs to take out some sort 
of subscription to search IP addresses now.

Any hints, etc here?   Thanks...
--
Richard D. McClary
Systems Administrator, Information Technology Group
ASPCA(r)
1717 S. Philo Rd, Ste 36
Urbana, IL  61802

richardmccl...@aspca.org

P: 217-337-9761
C: 217-417-1182
F: 217-337-9761
www.aspca.org


The information contained in this e-mail, and any attachments hereto, is from 
The American Society for the Prevention of Cruelty to Animals(r) (ASPCA(r)) and 
is intended only for use by the addressee(s) named herein and may contain 
legally privileged and/or confidential information. If you are not the intended 
recipient of this e-mail, you are hereby notified that any dissemination, 
distribution, copying or use of the contents of this e-mail, and any 
attachments hereto, is strictly prohibited. If you have received this e-mail in 
error, please immediately notify me by reply email and permanently delete the 
original and any copy of this e-mail and any printout thereof.


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: ARIN or other IP lookup?

2010-09-10 Thread Shauna Hensala 

https://www.arin.net/resources/index.html  upper right corner to search

To: ntsysadmin@lyris.sunbelt-software.com
Subject: ARIN or other IP lookup?
From: richardmccl...@aspca.org
Date: Fri, 10 Sep 2010 10:54:17 -0500



Greetings!



A few weeks ago, ARIN had a very nice
web site.  I could open my book mark, enter the IP address (copy and
paste) of a spam or scan source, and see where it came from. It would reference
me to other similar agencies (RIPE, APNIC, etc) which I could then open,
paste in the same IP, and finish chasing.



They (ARIN) seem to have change things
a bit, and I can't figure out how to search for IPs anymore.  It almost
looks like one needs to take out some sort of subscription to search IP
addresses now.



Any hints, etc here?   Thanks...

--

Richard D. McClary

Systems Administrator,
Information Technology Group


ASPCA®

1717 S. Philo Rd, Ste
36

Urbana, IL  61802

 

richardmccl...@aspca.org

 

P: 217-337-9761

C: 217-417-1182

F: 217-337-9761

www.aspca.org

 
The information contained
in this e-mail, and any attachments hereto, is from The American Society
for the Prevention of Cruelty to Animals® (ASPCA®)
and is intended only for use by the addressee(s) named herein and may contain
legally privileged and/or confidential information. If you are not the
intended recipient of this e-mail, you are hereby notified that any 
dissemination,
distribution, copying or use of the contents of this e-mail, and any attachments
hereto, is strictly prohibited. If you have received this e-mail in error,
please immediately notify me by reply email and permanently delete the
original and any copy of this e-mail and any printout thereof.

 
~ Finally, powerful endpoint security that ISN'T a resource hog! ~

~   ~



---

To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/

or send an email to listmana...@lyris.sunbeltsoftware.com

with the body: unsubscribe ntsysadmin   
  
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: ARIN or other IP lookup?

2010-09-10 Thread Richard Stovall 
Way up in the upper right, put the ip you're interested in into the box
labeled "SEARCH Whois".

I also hate their new website.

On Fri, Sep 10, 2010 at 11:54 AM,  wrote:

>
> Greetings!
>
> A few weeks ago, ARIN had a very nice web site.  I could open my book mark,
> enter the IP address (copy and paste) of a spam or scan source, and see
> where it came from. It would reference me to other similar agencies (RIPE,
> APNIC, etc) which I could then open, paste in the same IP, and finish
> chasing.
>
> They (ARIN) seem to have change things a bit, and I can't figure out how to
> search for IPs anymore.  It almost looks like one needs to take out some
> sort of subscription to search IP addresses now.
>
> Any hints, etc here?   Thanks...
> --
> Richard D. McClary
> Systems Administrator, Information Technology Group
> *ASPCA®*
> 1717 S. Philo Rd, Ste 36
> Urbana, IL  61802
>
> richardmccl...@aspca.org
>
> P: 217-337-9761
> C: 217-417-1182
> F: 217-337-9761
> *www.aspca.org* 
>
>
> The information contained in this e-mail, and any attachments hereto, is
> from The American Society for the Prevention of Cruelty to Animals® (ASPCA
> ®) and is intended only for use by the addressee(s) named herein and may
> contain legally privileged and/or confidential information. If you are not
> the intended recipient of this e-mail, you are hereby notified that any
> dissemination, distribution, copying or use of the contents of this e-mail,
> and any attachments hereto, is strictly prohibited. If you have received
> this e-mail in error, please immediately notify me by reply email and
> permanently delete the original and any copy of this e-mail and any printout
> thereof.
>
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin