Jump to content

Regional Internet Registry lookup and IP address resolution


Recommended Posts

I have mentioned this one several time in various posts - IPNetInfo.exe - and it accepts and processes full e-mail headers.

It will resolve the internet address of e-mail addresses, URL/URIs or domain names and lookup the Regional Registry whois records (ARIN, RIPE, APNIC, LACNIC or AfriNIC) from that or from direct entry of the IP address. A summary splash screen including abuse address (if in the whois record) is also available. It will handle multiple entries including full e-mail headers. Hmmm ... now has an option for IPV6 addresses, I shall have to update my own version. See:

http://www.nirsoft.net/utils/ipnetinfo.html

Caution - it DOES give "valid" results for spoofed data, such as is found in many spams. Sometimes that will be helpful, such as revealing differences between real server-IP address matching lookup and a spoofed server-IP address mismatch in the spam (but many spoofs are smarter than that).

Anyway, can be useful for looking a little deeper into things, for those of an inquiring disposition.

***************************************************************************

petzl just now mentions a rather more comprehensive shareware internet toolkit, net.demon, in

http://forum.spamcop.net/forums/index.php?...amp;#entry80461

... which he feels is worth investigating. It advertises some very worthwhile features indeed AFAICT.

Link to comment
Share on other sites

I have mentioned this one several time in various posts - IPNetInfo.exe - and it accepts and processes full e-mail headers.

It will resolve the internet address of e-mail addresses, URL/URIs or domain names and lookup the Regional Registry whois records (ARIN, RIPE, APNIC, LACNIC or AfriNIC) from that or from direct entry of the IP address. A summary splash screen including abuse address (if in the whois record) is also available. It will handle multiple entries including full e-mail headers. Hmmm ... now has an option for IPV6 addresses, I shall have to update my own version. See:

http://www.nirsoft.net/utils/ipnetinfo.html

Caution - it DOES give "valid" results for spoofed data, such as is found in many spams. Sometimes that will be helpful, such as revealing differences between real server-IP address matching lookup and a spoofed server-IP address mismatch in the spam (but many spoofs are smarter than that).

Anyway, can be useful for looking a little deeper into things, for those of an inquiring disposition.

***************************************************************************

petzl just now mentions a rather more comprehensive shareware internet toolkit, net.demon, in

http://forum.spamcop.net/forums/index.php?...amp;#entry80461

... which he feels is worth investigating. It advertises some very worthwhile features indeed AFAICT.

Well yours is an improvement and it's FREE

thanks

Link to comment
Share on other sites

  • 4 months later...

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...