Jump to content

Regional Internet Registry lookup and IP address resolution


Recommended Posts

I have mentioned this one several time in various posts - IPNetInfo.exe - and it accepts and processes full e-mail headers.

It will resolve the internet address of e-mail addresses, URL/URIs or domain names and lookup the Regional Registry whois records (ARIN, RIPE, APNIC, LACNIC or AfriNIC) from that or from direct entry of the IP address. A summary splash screen including abuse address (if in the whois record) is also available. It will handle multiple entries including full e-mail headers. Hmmm ... now has an option for IPV6 addresses, I shall have to update my own version. See:

http://www.nirsoft.net/utils/ipnetinfo.html

Caution - it DOES give "valid" results for spoofed data, such as is found in many spams. Sometimes that will be helpful, such as revealing differences between real server-IP address matching lookup and a spoofed server-IP address mismatch in the spam (but many spoofs are smarter than that).

Anyway, can be useful for looking a little deeper into things, for those of an inquiring disposition.

***************************************************************************

petzl just now mentions a rather more comprehensive shareware internet toolkit, net.demon, in

http://forum.spamcop.net/forums/index.php?...amp;#entry80461

... which he feels is worth investigating. It advertises some very worthwhile features indeed AFAICT.

Link to comment
Share on other sites

I have mentioned this one several time in various posts - IPNetInfo.exe - and it accepts and processes full e-mail headers.

It will resolve the internet address of e-mail addresses, URL/URIs or domain names and lookup the Regional Registry whois records (ARIN, RIPE, APNIC, LACNIC or AfriNIC) from that or from direct entry of the IP address. A summary splash screen including abuse address (if in the whois record) is also available. It will handle multiple entries including full e-mail headers. Hmmm ... now has an option for IPV6 addresses, I shall have to update my own version. See:

http://www.nirsoft.net/utils/ipnetinfo.html

Caution - it DOES give "valid" results for spoofed data, such as is found in many spams. Sometimes that will be helpful, such as revealing differences between real server-IP address matching lookup and a spoofed server-IP address mismatch in the spam (but many spoofs are smarter than that).

Anyway, can be useful for looking a little deeper into things, for those of an inquiring disposition.

***************************************************************************

petzl just now mentions a rather more comprehensive shareware internet toolkit, net.demon, in

http://forum.spamcop.net/forums/index.php?...amp;#entry80461

... which he feels is worth investigating. It advertises some very worthwhile features indeed AFAICT.

Well yours is an improvement and it's FREE

thanks

Link to comment
Share on other sites

  • 4 months later...

infosniper(dot)net is similar kind of tool to know such information by entering IP address. I like the way they show geographical location of a server on a map.

http://www.nirsoft.net/utils/ipnetinfo.html

This give abuse address's which is of more interest to me

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...