Is there a way to resolve attacker's IP address?

[Nepatsfan]

Hi,

Is there a way that we could find out where or "who" is for
an unknown
public IP, se. 220.xxx.xx.x?

During a recent review on my router's (with firewall
capabilities) logs, I
found several possible attacks from different IP addresses.

I was wondering who are they and where were they coming from,
and is there a
way for me to find out?

Many thanks.

Enter the entire IP wherever you see the term Whois on any of
these sites:

http://www.dnsstuff.com/
http://www.samspade.org/
http://www.arin.net/whois/index.html

Happy hunting

Nepatsfan

 

[xfile]

Hi,

Is there a way that we could find out where or "who" is for an unknown
public IP, se. 220.xxx.xx.x?

During a recent review on my router's (with firewall capabilities) logs, I
found several possible attacks from different IP addresses.

I was wondering who are they and where were they coming from, and is there a
way for me to find out?

Many thanks.

 

[xfile]

Hi,

Thanks for the kind and speedy response.

What people usually can do for the next step?

 

[Carey Frisch [MVP]]

Nothing....

 

[Tom Snoiker]

Well, you can spend the rest of your days tracking down Chinese and
Bulgarian hackers if it amuses you ;-)

 

[Steven L Umbach]

In short don't bother. Be happy that your firewall is doing it's job. At the
height of some worm activity on the internet I could see thousands of
entries an hour of attempts to access my network. --- Steve

 

[xfile]

Hi,

Thanks to all for your suggestions.

It amazes to see how many people are doing this, and I've found IP addresses
from all over the world, Israel, France, Japan, US, Taiwan, and even from MS
registered IP.

Although I am glad that my hardware and software firewall are doing the job,
I can't help to think how vulnerable people could be on the net.