Regional Internet Registry lookup and IP address resolution

[Farelf]

I have mentioned this one several time in various posts - IPNetInfo.exe - and it accepts and processes full e-mail headers.

It will resolve the internet address of e-mail addresses, URL/URIs or domain names and lookup the Regional Registry whois records (ARIN, RIPE, APNIC, LACNIC or AfriNIC) from that or from direct entry of the IP address. A summary splash screen including abuse address (if in the whois record) is also available. It will handle multiple entries including full e-mail headers. Hmmm ... now has an option for IPV6 addresses, I shall have to update my own version. See:

http://www.nirsoft.net/utils/ipnetinfo.html

Caution - it DOES give "valid" results for spoofed data, such as is found in many spams. Sometimes that will be helpful, such as revealing differences between real server-IP address matching lookup and a spoofed server-IP address mismatch in the spam (but many spoofs are smarter than that).

Anyway, can be useful for looking a little deeper into things, for those of an inquiring disposition.

***************************************************************************

petzl just now mentions a rather more comprehensive shareware internet toolkit, net.demon, in

http://forum.spamcop.net/forums/index.php?...amp;#entry80461

... which he feels is worth investigating. It advertises some very worthwhile features indeed AFAICT.

[petzl]

I have mentioned this one several time in various posts - IPNetInfo.exe - and it accepts and processes full e-mail headers.

It will resolve the internet address of e-mail addresses, URL/URIs or domain names and lookup the Regional Registry whois records (ARIN, RIPE, APNIC, LACNIC or AfriNIC) from that or from direct entry of the IP address. A summary splash screen including abuse address (if in the whois record) is also available. It will handle multiple entries including full e-mail headers. Hmmm ... now has an option for IPV6 addresses, I shall have to update my own version. See:

http://www.nirsoft.net/utils/ipnetinfo.html

Caution - it DOES give "valid" results for spoofed data, such as is found in many spams. Sometimes that will be helpful, such as revealing differences between real server-IP address matching lookup and a spoofed server-IP address mismatch in the spam (but many spoofs are smarter than that).

Anyway, can be useful for looking a little deeper into things, for those of an inquiring disposition.

***************************************************************************

petzl just now mentions a rather more comprehensive shareware internet toolkit, net.demon, in

http://forum.spamcop.net/forums/index.php?...amp;#entry80461

... which he feels is worth investigating. It advertises some very worthwhile features indeed AFAICT.

Well yours is an improvement and it's FREE

thanks

[ServerExperts]

infosniper(dot)net is similar kind of tool to know such information by entering IP address. I like the way they show geographical location of a server on a map.

[petzl]

infosniper(dot)net is similar kind of tool to know such information by entering IP address. I like the way they show geographical location of a server on a map.

http://www.nirsoft.net/utils/ipnetinfo.html

This give abuse address's which is of more interest to me