Penetration Testing mailing list archives

RE: Correlating an IP address with a phone number


From: andykin () privatei com
Date: 13 Jan 2006 20:41:47 -0000

I like Mr. Theriault's short answer, "no", however in many cases there are
a number of ways to get closer to the phone number or actual contact
associated with an IP address or range of IP addresses....

The first place to check is ARIN (www.arin.net), which will give you the
ISP and sometimes the actual contact information.

If in the ARIN response there's a line starting with something similar to
"rwhois://rwhois.comast.net", then you can usually get more granular
information about an IP subnet by either telnetting to the provided
"rwhois" address and typing in the IP address in question, or simply
plugging the number into Sam Spade's IP Whois tool, which will conduct the
rwhois search automagically. (www.samspade.org)

Googling the IP address in both Google web and Google groups will
sometimes provide more information, such as an email address, which you
can further investigate. Conducting an "nslookup" or "dig" will sometimes
provide an additional domain name you can conduct a WHOIS on that will
provide registration details.

Hope this helps a little....

-a

------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner: 

Hackers are concentrating their efforts on attacking applications on your 
website. Up to 75% of cyber attacks are launched on shopping carts, forms, 
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are 
futile against web application hacking. Check your website for vulnerabilities 
to SQL injection, Cross site scripting and other web attacks before hackers do! 
Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------


Current thread: