Page 1 of 1

need some help

PostPosted: Mon May 09, 2005 8:59 pm
by shysta
some guys are makin some bad comments on my fiances guestbooks online and we cant figure out who it is. is there anyway we can look up an actual address these ip's are comin from? any help would be greatly appreciated..

71.240.34.102

70.20.72.65

Re: need some help

PostPosted: Mon May 09, 2005 9:49 pm
by bfolkens
shysta wrote:some guys are makin some bad comments on my fiances guestbooks online and we cant figure out who it is. is there anyway we can look up an actual address these ip's are comin from? any help would be greatly appreciated..

71.240.34.102

70.20.72.65


I did a whois on both:
Code: Select all
whois 71.240.34.102
whois 70.20.72.65


And from what i can see, "Verizon Internet Services" owns both blocks.
They have an 'abuse' contact email in the record, which you should contact if you are having trouble.
Code: Select all
OrgAbuseHandle: VISAB-ARIN
OrgAbuseName:   VIS Abuse
OrgAbusePhone:  +1-214-513-6711
OrgAbuseEmail:  [email protected]


I did a traceroute on the IP also - unfortunately, it could be anywhere - but the trace does look like the following might be true (if you give the abuse contact the exact time + date it happened, along with which IP, then they will be able to check more specifically)...

These look like they're routed through a NOC in Pittsburg, PA
Code: Select all
71.240.34.102
8  so-7-1-0-0.BB-RTR1.NY325.verizon-gni.net (130.81.17.128)
9  so-6-0-0-0.BB-RTR1.NY5030.verizon-gni.net (130.81.7.90)
10  so-0-3-0-0.BB-RTR2.NWRK.verizon-gni.net (130.81.7.190)
11  so-6-0-0-0.BB-RTR2.PHIL.verizon-gni.net (130.81.7.185)
12  so-7-0-0-0.BB-RTR1.PHIL.verizon-gni.net (130.81.19.54)
13  at-3-0-1-0.CORE-RTR2.PITT2.verizon-gni.net (130.81.18.3)


These look like they're from the same area
Code: Select all
70.20.72.65
9  so-7-1-0-0.BB-RTR1.NY325.verizon-gni.net (130.81.17.128)
10  so-6-0-0-0.BB-RTR1.NY5030.verizon-gni.net (130.81.7.90)
11  so-0-3-0-0.BB-RTR2.NWRK.verizon-gni.net (130.81.7.190)
12  so-6-0-0-0.BB-RTR2.PHIL.verizon-gni.net (130.81.7.185)
13  so-7-0-0-0.BB-RTR1.PHIL.verizon-gni.net (130.81.19.54)
14  at-3-0-1-0.CORE-RTR2.PITT2.verizon-gni.net (130.81.18.3)


(traceroutes stopped after repeated no-routes, looks like they're offline at this leased IP if it's DHCP or just offline period)