Subject: Re: Please scan your computers for viruses
From: f/fgeorge
Date: 04/10/2003, 13:58
Newsgroups: alt.sci.seti

No but at different web sites like:
http://www.samspade.org/t/lookat?a=dsl-gervais-82.web-ster.com
you can find out this info.
I started at www.samspade.org and pasted the IP address into the first
box and clicked on "do stuff", then I click on the reverse DNS lookup,
then on "do stuff" again.

On Fri, 3 Oct 2003 14:01:20 -0700, AthlonRob
<athlonrob@nodomainhere.ext> wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
NotDashEscaped: You need GnuPG to verify this message

On Fri, 03 Oct 2003 03:11:02 -0700, Dave Trapnell <dtresearch@earthlink.net> wrote:
I have tried to find a way to obtain the ISP name from the
IP address. I have tried ws_watch 95.08 as well as
http://idl.net/IMAP/imapfaq1.shtml , 
http://www.dnsstuff.com/ , and
http://remote.12dt.com/rns/ ,
as well as putting the IP address into the browser. None of
these techniques has provided useful contact information.

Does Windoze have a 'whois' command on it?  If not, find one... 

Then just do a whois on the IP address.

If that doesn't contain abuse info, do a whois on the names mentioned in 
there.

For example:

rob@dell rob $ whois 12.111.173.22
AT&T WorldNet Services ATT (NET-12-0-0-0-1)
                                 12.0.0.0 - 12.255.255.255
CANBY TELEPHONE ASSOCIATION CANBY-TE743-172 (NET-12-111-172-0-1)
                                 12.111.172.0 - 12.111.175.255

# ARIN WHOIS database, last updated 2003-10-02 19:15
# Enter ? for additional hints on searching ARIN's WHOIS database.

rob@dell rob $ whois NET-12-111-172-0-1 -H

OrgName:    CANBY TELEPHONE ASSOCIATION
OrgID:      CANB
Address:    144 SE 2ND AVENUE
City:       CANBY
StateProv:  OR
PostalCode: 97013
Country:    US

NetRange:   12.111.172.0 - 12.111.175.255
CIDR:       12.111.172.0/22
NetName:    CANBY-TE743-172
NetHandle:  NET-12-111-172-0-1
Parent:     NET-12-0-0-0-1
NetType:    Reallocated
Comment:
RegDate:    2000-12-27
Updated:    2000-12-27

TechHandle: JR1127-ARIN
TechName:   Radke, Justin G.
TechPhone:  +1-503-263-9355
TechEmail:  abuse@web-ster.com

# ARIN WHOIS database, last updated 2003-10-02 19:15
# Enter ? for additional hints on searching ARIN's WHOIS database.

And there we have the abuse address for 12.111.173.22.

SamSpade.org might offer similar services, it's been a few years since 
I've been there, however.