Page 1 of 2 12 LastLast
Results 1 to 10 of 18

Thread: Determining ISP from an IP address

  1. June 14th, 2002, 01:51 AM #1
    Hadoob024
    Hadoob024 is offline
    Member
    Join Date
    Jun 2002
    Posts
    44

    Question Determining ISP from an IP address

    I know that this is a newbie question that's probably been asked before, but I tried doing searches on this site and couldn't find anything.

    I also tried searching on Google, and all I found were some sites that had some utilities to download to find this information out. However, I'm not about to just start downloading and installing any application, so I thought I'd post a message here. Does anyone know of a good app/utility/website to find this info out? My firewall's going nuts reporting this one IP address scanning like every port on my machine, and I wanna find out who it is and report him. Thanks.
    -Hadoob024-
    Reply With Quote Reply With Quote
  2. June 14th, 2002, 01:55 AM #2
    ammo
    ammo is offline
    Senior Member
    Join Date
    Sep 2001
    Posts
    1,027
    www.samspade.org

    Ammo
    Credit travels up, blame travels down -- The Boss
    Reply With Quote Reply With Quote
  3. June 14th, 2002, 02:00 AM #3
    prodikal
    prodikal is offline
    Senior Member
    Join Date
    Apr 2002
    Posts
    1,050
    i get the same thing at least 26 alertts in 1 or 2 seconds and i found out by whois that it was scannerabuse.blueyonder.co.uk which
    is my isp is this normal u r isp running porty scans on u r box oh yea try what ammo said
    By the sacred **** of the sacred psychedelic tibetan yeti ....We\'ll smoke the chinese out
    The 20th century pharoes have the slaves demanding work
    http://muaythaiscotland.com/
    Reply With Quote Reply With Quote
  4. June 14th, 2002, 02:01 AM #4
    ammo
    ammo is offline
    Senior Member
    Join Date
    Sep 2001
    Posts
    1,027
    prodikal: what port?

    Ammo
    Credit travels up, blame travels down -- The Boss
    Reply With Quote Reply With Quote
  5. June 14th, 2002, 02:04 AM #5
    Hadoob024
    Hadoob024 is offline
    Member
    Join Date
    Jun 2002
    Posts
    44

    Talking

    sweet!!! thanks for the tip!
    -Hadoob024-
    Reply With Quote Reply With Quote
  6. June 14th, 2002, 02:07 AM #6
    Tedob1
    Tedob1 is offline
    Senior Member
    Join Date
    Nov 2001
    Posts
    4,785
    prodikal id send them a copy of the log just incase somebody hi-jacked their server.
    Bukhari:V3B48N826 “The Prophet said, ‘Isn’t the witness of a woman equal to half of that of a man?’ The women said, ‘Yes.’ He said, ‘This is because of the deficiency of a woman’s mind.’”
    Reply With Quote Reply With Quote
  7. June 14th, 2002, 02:14 AM #7
    xmaddness
    xmaddness is offline
    Webius Designerous Indiginous
    Join Date
    Mar 2002
    Location
    South Florida
    Posts
    1,123
    Well, Some ISP's tend to ping users on its network to see if the connection is still live. But 26 in 2 seconds isn't normal. Sounds like someone did a scan on you.

    As far as finding out what ips are associated with which I always use ARIN located at http://www.arin.net/whois/arinwhois.html


    Or do a search for "WHOIS" on google and you can find many more.
    Reply With Quote Reply With Quote
  8. June 14th, 2002, 02:17 AM #8
    prodikal
    prodikal is offline
    Senior Member
    Join Date
    Apr 2002
    Posts
    1,050
    ammo the ports are 50734. 6588. 50735 .1080. 50736. 50736. 50812
    6588.50813.50814.50815.50875.6588.50876.50877.50878.50946.50947
    6588.50948.50949.51013.51014.6588.51015.51016.51076.51077.51078
    51079.37358
    im not really worried about it but does u r isp usually port scan u r box is this normall behaviour
    By the sacred **** of the sacred psychedelic tibetan yeti ....We\'ll smoke the chinese out
    The 20th century pharoes have the slaves demanding work
    http://muaythaiscotland.com/
    Reply With Quote Reply With Quote
  9. June 14th, 2002, 02:24 AM #9
    xmaddness
    xmaddness is offline
    Webius Designerous Indiginous
    Join Date
    Mar 2002
    Location
    South Florida
    Posts
    1,123
    Well, do to the fact that some of the ports are sequential it looks like someone scanning. You did say this was in 1 or 2 seconds right?

    Normally if an ISP does ping you its just a random high number port, but only once in a while, and not in a sequential pattern like this. I would notify it to the Admin of the network. Its kinda strange.
    Reply With Quote Reply With Quote
  10. June 14th, 2002, 02:30 AM #10
    prodikal
    prodikal is offline
    Senior Member
    Join Date
    Apr 2002
    Posts
    1,050
    yes xmaddness the first alert shows and the counter just keeps riseing when i went 2 whois it said it was scannerabuse.blueyonder.co.uk
    does scanner abuse mean anything 2 any 1 ? any feed back would be great thanx for u r help allready much apprecciated
    By the sacred **** of the sacred psychedelic tibetan yeti ....We\'ll smoke the chinese out
    The 20th century pharoes have the slaves demanding work
    http://muaythaiscotland.com/
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules