Internet IP address discovery

[William Pribble]

I have a list of IP addresses that accessed my web server. I would like to find out which organizations own the individual IP addresses. Is there a way of finding this information from the Unix command line so I can automate resolving my entire list of IP addresses to owning organization?

[Andreas Voss]

Hi,

you can use nslookup

Regards

[Volker Borowski]

Hello Elaine,

for european targets you could query the whois db from ripe.

http://www.ripe.net

Do not know how the corresponding instance for US is.

Volker

[Santosh Nair_1]

In the US, you can search http://www.whois.net

-Santosh

[John Waller]

The nslookup will work for all addresses listed at your DNS server. If these can't be-resolved then you may need to contact InterNIC (the Internet Network Information Centre) to see who has registered the address.

[Herve BRANGIER]

Hi

You can have more information with nslookup
and whois commands :

nslookup give you the domain name
whois give you information on the domain name
owner.

HTH

Herv?

[Edward Alfert_2]

to find out which organization or company controls a certain ip number go to:
http://www.arin.net/whois/
type in the ip number and it will tell you who it has been delegated to

and although it is used primarily for information on military networks, you can use:
http://www.nic.mil/dodnic/
to also get information on who controls ip addresses.

I'm assuming you weren't asking about domain names... for that just go to http://www.internic.net and it will tell you who the registrar for a domain name is then go to that registrar and get the detail information on a domain name.

[William Pribble]

Thanks for the information all....

[Satish Y]

http://www.checkdomain.com

Cheers...
Satish.

[David Navarro]

You can execute nslookup, then write an address, and you will see hostname and doamin. If not, you can do a traceroute.
Of course, these addresses must be accesible by your host.

[Sanjay_6]

Hi Elaine,

Try nsllokup
nslookup
> Server_IP

Another command would be
/usr/contrib/bin/traceroute ip_address

This should help.

thanks

[Wodisch]

Hello Elaine,

usually the individual stations of companies
do not have DNS names of their own, so you
might have to check for some other addresses
of the network where the web-clients came from.
The first and the last few numbers are often
those having a name.

HTH,
Wodisch

[E. Wong]

Elaine,

Try http://www.neoworx.com/ and download a demo.

E.