WebProWorld Part of WebProNews.com
Page One Link To Us Edit Profile Private Messages Archives FAQ RSS Feeds  
 

Go Back   WebProWorld > Webmaster, IT and Security Discussion > Internet Security Discussion Forum
Subscribe to the Newsletter FREE!


Register FAQ Members List Calendar Arcade Chatbox Mark Forums Read

Internet Security Discussion Forum This forum is for the discussion of security related issues. If you find a new Phishing scheme, spyware, virus or malicious site - let us know about it. If any of the above found you... here's where you ask for help.

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 02-03-2006, 05:38 AM
WebProWorld Veteran
 

Join Date: Jul 2005
Location: London - Cheswick
Posts: 675
JuniorOnline RepRank 0
Default How to locate a website through IP address?

Hi All,

I am trying to find out which website is sending me loads of traffic from pakistan.. none of the visitors are converting..and they are sending me a lot of spam emails.

203.135.21.45

this is the IP address am trying to locate... is it a website ip address?

it shows I was visited 60 times by this IP.

thanks alot

T
Reply With Quote
  #2 (permalink)  
Old 02-03-2006, 07:59 AM
WebProWorld Pro
 

Join Date: Sep 2005
Location: Manchester, UK
Posts: 257
mikesmith76 RepRank 0
Default

If you go to http:// 203.135.21.45/ that should show any website at this ip address. however i got an access denied message when i atetmpted this.

Alternatively do a dns lookup and see who owns the ip address. you could even consider blocking this address is they are causing you serious problems, although this will probably only solve the problem for a short amount of time
Reply With Quote
  #3 (permalink)  
Old 02-03-2006, 08:01 AM
WebProWorld Veteran
 

Join Date: Jul 2005
Location: London - Cheswick
Posts: 675
JuniorOnline RepRank 0
Default

thanks Mike - thats really helpful..
Reply With Quote
  #4 (permalink)  
Old 02-03-2006, 08:08 AM
WebProWorld Pro
 

Join Date: Sep 2005
Location: Manchester, UK
Posts: 257
mikesmith76 RepRank 0
Default

well what else can i say, there is no magic way to see what the guy has on his server. if he's blocked it he's blocked it
Reply With Quote
  #5 (permalink)  
Old 02-03-2006, 08:14 AM
Faglork's Avatar
WebProWorld Veteran
 

Join Date: Feb 2005
Location: Forchheim, Germany
Posts: 947
Faglork RepRank 0
Default

http://www.dnsstuff.com/

hth,
faglork
Reply With Quote
  #6 (permalink)  
Old 02-04-2006, 03:14 PM
WebProWorld 1,000+ Club
 

Join Date: Jul 2003
Location: Toronto, Canada
Posts: 2,193
cyanide RepRank 0
Default

The ip could be an ISP rather than a website.
The ip also appears to be blacklisted, so if you had rbl set up on your server where your website is, then these emails would never arrive.
__________________
|
Web Hosting Guru
| Need Help For Your Forum?
Reply With Quote
  #7 (permalink)  
Old 03-07-2006, 08:58 PM
WebProWorld Member
 

Join Date: Mar 2006
Posts: 80
dannywirken RepRank 0
Default

Run tracert in DOS on your machine as see where the IP ends up. It would normally give you the hosting company or ISP's name.
Reply With Quote
  #8 (permalink)  
Old 03-08-2006, 11:25 AM
kgun's Avatar
WebProWorld 1,000+ Club
 

Join Date: May 2005
Location: Norway
Posts: 5,131
kgun RepRank 3kgun RepRank 3
Default

Quote:
Originally Posted by Faglork
http://www.dnsstuff.com/

hth,
faglork
If you use the that tool and make a reverse DNS (Domain Name Server) lookup, you get the following result:

Location: Pakistan (high) [City: Multan, Punjab]

.................................................. .

Details:
ns3.apnic.net. (an authoritative nameserver for 203.in-addr.arpa., which is in charge of the reverse DNS for 203.135.21.45)
says that there are no PTR records for 203.135.21.45.

To get reverse DNS set up for 203.135.21.45, you need to speak to your Internet provider. You could also
check with read-TXT-record-of-zone-first-dns-admin@apnic.net., who is in charge of the 203.in-addr.arpa. zone.

Note that all Internet accessible hosts are expected to have a reverse DNS entry (per RFC1912 2.1),
and many mailservers (such as AOL) will likely block E-mail from mailservers with no reverse DNS entry.
To see the reverse DNS traversal, to make sure that all DNS servers are reporting the correct results, you can Click Here.


Tracert also ends up in Pakistan: at the following address:

paknet-II.mu178d1.pie.net.pk (IP: 202.125.139.66)

My coloring of text above.

You find additional tracerouter tools etc on the security sub page of MultiFinanceIT. Also scan the "links" page for more information.
Reply With Quote
  #9 (permalink)  
Old 04-07-2006, 11:35 AM
WebProWorld New Member
 

Join Date: Oct 2005
Posts: 5
JohnnyHeavens RepRank 0
Default

Quote:
Originally Posted by Faglork
http://www.dnsstuff.com/

hth,
faglork
YES! :) One of the best sites on the net.
Reply With Quote
Reply

  WebProWorld > Webmaster, IT and Security Discussion > Internet Security Discussion Forum
Tags: , , ,



Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Search Engine Optimization by vBSEO 3.2.0