1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

ip to web address

Discussion in 'Internet, Connectivity and Communications' started by twizzle, Apr 3, 2006.

  1. twizzle

    twizzle Gigabyte Poster

    1,838
    33
    104
    Ok i have an IP address that i want to trace and find out who it belongs to.. i want to know if its a website or a possible spammer. Where can i look for this info.

    this is what i get using tracert.

    Tracing route to host-81-190-253-29.elk.mm.pl [81.190.253.29]

    over a maximum of 30 hops:


    1 * * * Request timed out.

    2 17 ms 17 ms 27 ms i-194-106-33-152.freedom2surf.net [194.106.33.152]

    3 18 ms 21 ms 18 ms i-194-106-32-254.freedom2surf.net [194.106.32.254]

    4 21 ms 21 ms 23 ms pc1.cr05.hx2.bb.pipex.net [62.72.143.13]

    5 19 ms 22 ms 22 ms g2-1-6.cr01.hx2.bb.pipex.net [62.72.142.129]

    6 24 ms 22 ms 22 ms ldn-b2-geth6-2.telia.net [213.248.100.93]

    7 24 ms 21 ms 19 ms ldn-bb1-pos0-1-0.telia.net [213.248.74.1]

    8 39 ms 33 ms 33 ms hbg-bb1-link.telia.net [80.91.249.11]

    9 48 ms 52 ms 52 ms war-b3-pos6-0-0.telia.net [213.248.96.2]

    10 51 ms 54 ms 49 ms tpsa-01622-war-b3.c.telia.net [213.248.79.18]

    11 49 ms 50 ms 50 ms 195.149.232.158

    12 54 ms 55 ms 52 ms 195.205.0.166

    13 58 ms 58 ms 58 ms 213.77.0.130

    14 * * * Request timed out.

    15 63 ms 70 ms 67 ms host-81-190-253-29.elk.mm.pl [81.190.253.29]



    Trace complete.

    I think its a spam or phising site but want to find out. Help plz?
     
    Certifications: Comptia A+, N+, MS 70-271, 70-272
    WIP: Being a BILB,
  2. nugget
    Honorary Member

    nugget Junior toady

    7,796
    71
    224
    Check out a place called http://www.dnsstuff.com/

    Should be able to find what you need.
     
    Certifications: A+ | Network+ | Security+ | MCP (270,271,272,290,620) | MCDST | MCTS:Vista
    WIP: MCSA, 70-622,680,685
  3. d-Faktor
    Honorary Member

    d-Faktor R.I.P - gone but never forgotten.

    810
    0
    39
    host-81-190-253-29.elk.mm.pl looks more like a dynamic host name for an everyday isp customer.
     
  4. simongrahamuk
    Honorary Member

    simongrahamuk Hmmmmmmm?

    6,199
    125
    199
    Do a whois

    EDIT: Too blomin slow! :oops:
     
  5. Nelix
    Honorary Member

    Nelix Gigabyte Poster

    1,414
    3
    82
    d, you could be right

    Information related to '81.190.252.0 - 81.190.255.255'
    inetnum: 81.190.252.0 - 81.190.255.255
    netname: MULTIMEDIA-POLSKA-9
    descr: Multimedia Polska Sp. z o.o.
    descr: Cable TV Provider
    descr: Gdynia
    country: PL
    admin-c: MS44026-RIPE
    tech-c: SR5213-RIPE
    status: ASSIGNED PA
    remarks: INFRA-AW
    mnt-by: SZELSAT-MNT
    changed: *******@multimedia.pl 20040224
    source: RIPE
    role: SZELSAT ROLE
    address: ul.T. Wendy 7/9
    address: 81-341 Gdynia
    address: Poland
    phone: +48 58 6616457
    fax-no: +48 58 6617448
    e-mail: ***@multimedia.pl
    remarks: trouble: PS16820-RIPE
    admin-c: MS44026-RIPE
    tech-c: PS16820-RIPE
    tech-c: AT8360-RIPE
    nic-hdl: SR5213-RIPE
    notify: ***@multimedia.pl
    mnt-by: SZELSAT-MNT
    changed: ***@szel-sat.com.pl 20010829
    changed: *******@multimedia.pl 20030204
    source: RIPE
    person: Marek Sajdak
    address: Multimedia Polska Sp. z o.o.
    address: 81-341 Gdynia
    address: T.Wendy 7/9
    address: POLAND
    phone: +48 58 6660340
    fax-no: +48 58 6660349
    e-mail: ********@multimedia.pl
    nic-hdl: MS44026-RIPE
    mnt-by: SZELSAT-MNT
    changed: *******@szel-sat.pl 20010407
    changed: *******@szel-sat.pl 20010829
    changed: *******@multimedia.pl 20030204
    source: RIPE
    % Information related to '81.190.248.0/21AS30824'
    route: 81.190.248.0/21
    descr: Networks in Poland
    origin: AS30824
    notify: ***@multimedia.pl
    mnt-by: SZELSAT-MNT
    changed: *******@multimedia.pl 20040224
    source: RIPE
     
    Certifications: A+, 70-210, 70-290, 70-291, 70-410, 70-411, 70-337, 70-347
    WIP: 74-409
  6. hbroomhall

    hbroomhall Petabyte Poster Gold Member

    6,623
    115
    224
    Almost certainly belongs to a customer of Multimedia Polska.

    In *theory* an email of complaint sent to abuse@mm.pl should get it dealt with.

    Harry.
     
    Certifications: ECDL A+ Network+ i-Net+
    WIP: Server+
  7. hbroomhall

    hbroomhall Petabyte Poster Gold Member

    6,623
    115
    224
    BTW - how did you get the address? You need to be careful that the address is real - a lot of stuff is spoofed these days. Some days I get over 500 bounced emails at home from spoofed source addresses.

    Harry.
     
    Certifications: ECDL A+ Network+ i-Net+
    WIP: Server+
  8. twizzle

    twizzle Gigabyte Poster

    1,838
    33
    104
    Yes it does appear to be from poland.. and ISP there.

    The address was in an email about an attempt to acces online banking.. on an account that doesnt exist for that bank. Was wondering if the email was a phising email or if it was real then where did the unautherised access attempt come from....
     
    Certifications: Comptia A+, N+, MS 70-271, 70-272
    WIP: Being a BILB,
  9. hbroomhall

    hbroomhall Petabyte Poster Gold Member

    6,623
    115
    224
    Depends on the precise wording. However, I find that all emails I get about banking are bogus, without exception.

    As there are so many of them I no longer bother to send abuse reports. I know from our abuse people at my company that there are always plenty of others who report!

    Harry.
     
    Certifications: ECDL A+ Network+ i-Net+
    WIP: Server+
  10. d-Faktor
    Honorary Member

    d-Faktor R.I.P - gone but never forgotten.

    810
    0
    39
    it could be spoofed, as harry mentioned. it could be an infected machine. the owner at aforementioned address may probably not even be aware that his/her machine is used as a spam relay.
     
  11. sweetyy

    sweetyy Banned

    1
    0
    0
    Heh u can trace out the Ip address that u having & location from this site SPAM LINK REMOVED
    I often click on to this site to know about the location & Ip address from which website i'm receiving the message.
    Copy the Ip address and search in the above site i mentioned u can find out Solution for ur Queries!!!
    This site provide this Ip address information at free of cost..
    Click on to this site!!!
    Cheers-)
     
  12. joe90

    joe90 New Member

    5
    0
    1
    hey

    I tried the link as I too am getting a ton of spam from Chinese websites offering the world for a fiver ..

    anyway I clicked on the click .. page showed my public address but it said I'm in Yorkshire when in actual fact I'm in essex?

    interesting ....
     
  13. zebulebu

    zebulebu Terabyte Poster

    3,748
    330
    187
    LOL - this is absolutely fantastic - a spam post spamming a tool to look up spammers! Win!:biggrin
     
    Certifications: A few
    WIP: None - f*** 'em
  14. SimonD

    SimonD Terabyte Poster Moderator

    3,482
    400
    199
    You have to be careful with Spam mails, the really good ones are spoofed.

    However if you ever want to find out the details on an IP address then go to www.ripe.net, anything they don't have they will have a link to one of the other registrars.
     
    Certifications: CNA | CNE | CCNA | MCP | MCP+I | MCSE NT4 | MCSA 2003 | Security+ | MCSA:S 2003 | MCSE:S 2003 | MCTS:SCCM 2007 | MCTS:Win 7 | MCITP:EDA7 | MCITP:SA | MCITP:EA | MCTS:Hyper-V | VCP 4 | ITIL v3 Foundation | VCP 5 DCV | VCP 5 Cloud | VCP6 NV | VCP6 DCV | VCAP 5.5 DCA
    WIP: VCP6-CMA, VCAP-DCD and Linux + (and possibly VCIX-NV).

Share This Page

Loading...