Security Basics mailing list archives

Re: Investigation- Web pages visited


From: Brian Loe <knobdy () gmail com>
Date: Wed, 2 Nov 2005 15:57:52 -0600

Isn't this more of a place for a proxy server - IDS being more for
intrusion detection and blocking?

On 11/2/05, Steve Barron <thurgoodj187 () hotmail com> wrote:
Hi

I am trying to investigate some possible corporate policy violations, mostly
involving porn.  My IDS matches rules for certain criteria and looks for
banned words in html.  When I get the ip, i can query it, but most of the
time I get info about a hosting provider.  When I attempt to access the ip
http://155.X.X.X i get either some generic page or a 404 error.  Is there
any way to find out what sites are hosted at a given IP?  My logs have not
been much help for this.

Thanks

Steve





Current thread: