Sign in to follow this  
Followers 0
Farelf

Regional Internet Registry lookup and IP address resolution

4 posts in this topic

I have mentioned this one several time in various posts - IPNetInfo.exe - and it accepts and processes full e-mail headers.

It will resolve the internet address of e-mail addresses, URL/URIs or domain names and lookup the Regional Registry whois records (ARIN, RIPE, APNIC, LACNIC or AfriNIC) from that or from direct entry of the IP address. A summary splash screen including abuse address (if in the whois record) is also available. It will handle multiple entries including full e-mail headers. Hmmm ... now has an option for IPV6 addresses, I shall have to update my own version. See:

http://www.nirsoft.net/utils/ipnetinfo.html

Caution - it DOES give "valid" results for spoofed data, such as is found in many spams. Sometimes that will be helpful, such as revealing differences between real server-IP address matching lookup and a spoofed server-IP address mismatch in the spam (but many spoofs are smarter than that).

Anyway, can be useful for looking a little deeper into things, for those of an inquiring disposition.

***************************************************************************

petzl just now mentions a rather more comprehensive shareware internet toolkit, net.demon, in

http://forum.spamcop.net/forums/index.php?...amp;#entry80461

... which he feels is worth investigating. It advertises some very worthwhile features indeed AFAICT.

Share this post


Link to post
Share on other sites

I have mentioned this one several time in various posts - IPNetInfo.exe - and it accepts and processes full e-mail headers.

It will resolve the internet address of e-mail addresses, URL/URIs or domain names and lookup the Regional Registry whois records (ARIN, RIPE, APNIC, LACNIC or AfriNIC) from that or from direct entry of the IP address. A summary splash screen including abuse address (if in the whois record) is also available. It will handle multiple entries including full e-mail headers. Hmmm ... now has an option for IPV6 addresses, I shall have to update my own version. See:

http://www.nirsoft.net/utils/ipnetinfo.html

Caution - it DOES give "valid" results for spoofed data, such as is found in many spams. Sometimes that will be helpful, such as revealing differences between real server-IP address matching lookup and a spoofed server-IP address mismatch in the spam (but many spoofs are smarter than that).

Anyway, can be useful for looking a little deeper into things, for those of an inquiring disposition.

***************************************************************************

petzl just now mentions a rather more comprehensive shareware internet toolkit, net.demon, in

http://forum.spamcop.net/forums/index.php?...amp;#entry80461

... which he feels is worth investigating. It advertises some very worthwhile features indeed AFAICT.

Well yours is an improvement and it's FREE

thanks

Share this post


Link to post
Share on other sites

infosniper(dot)net is similar kind of tool to know such information by entering IP address. I like the way they show geographical location of a server on a map.

Share this post


Link to post
Share on other sites

infosniper(dot)net is similar kind of tool to know such information by entering IP address. I like the way they show geographical location of a server on a map.

http://www.nirsoft.net/utils/ipnetinfo.html

This give abuse address's which is of more interest to me

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0