|
|
|
|
| Author |
|
|
Senior Member
Join Date: Jun 2000
Location: N. Phoenix AZ USA
Posts: 28,943
|
IP address question
Anyone know how to track this IP address?
I have gotten it this far but havent the slightest idea what it says in line 17. Joe A TraceRoute to 71.226.82.73 [c-71-226-82-73.hsd1.fl.comcast.net] Hop (ms) (ms) (ms) IP Address Host name 1 0 0 0 66.98.244.1 gphou-66-98-244-1.ev1servers.net 2 0 0 0 66.98.241.16 gphou-66-98-241-16.ev1servers.net 3 1 0 0 38.99.206.173 - 4 1 1 2 38.112.35.237 g4-0-0.core01.iah01.atlas.cogentco.com 5 1 3 1 154.54.2.202 t4-1.mpd01.iah01.atlas.cogentco.com 6 43 43 44 154.54.2.165 te2-4.mpd01.dca01.atlas.cogentco.com 7 45 44 44 154.54.2.182 v3491.mpd01.dca02.atlas.cogentco.com 8 45 45 46 154.54.5.46 v3496.mpd01.iad01.atlas.cogentco.com 9 45 46 44 154.54.3.221 g9-0-0-3492.core01.iad01.atlas.cogentco.com 10 40 41 41 192.205.33.201 gr1-a3110s1.attga.ip.att.net 11 38 38 37 12.123.8.190 tbr2033001.wswdc.ip.att.net 12 38 37 39 12.122.10.70 tbr1-cl17.attga.ip.att.net 13 39 37 37 12.123.20.9 gar2-p360.attga.ip.att.net 14 49 48 47 12.124.58.166 - 15 47 47 47 68.86.166.53 - 16 47 48 50 68.86.166.34 ubr01.fruitlandpr.fl.lakecnty.comcast.net 17 57 Timed out 52 71.226.82.73 c-71-226-82-73.hsd1.fl.comcast.net
__________________
2013 Jag XF, 2002 Dodge Ram 2500 Cummins (the workhorse), 1992 Jaguar XJ S-3 V-12 VDP (one of only 100 examples made), 1969 Jaguar XJ (been in the family since new), 1985 911 Targa backdated to 1973 RS specs with a 3.6 shoehorned in the back, 1959 Austin Healey Sprite (former SCCA H-Prod), 1995 BMW R1100RSL, 1971 & '72 BMW R75/5 "Toaster," Ural Tourist w/sidecar, 1949 Aeronca Sedan / QB |
||
01-18-2007, 08:06 AM
|
|
|
Registered
Join Date: Mar 2003
Posts: 10,318
|
Fitlering ICMP traffic on that hop, probably a home router dropping the packets, etc.
Edit - or the computer/router/whatever that has that IP leased isn't turned on at the moment.
__________________
“IN MY EXPERIENCE, SUSAN, WITHIN THEIR HEADS TOO MANY HUMANS SPEND A LOT OF TIME IN THE MIDDLE OF WARS THAT HAPPENED CENTURIES AGO.” |
||
|
01-18-2007, 08:20 AM
|
|
|
Banned
Join Date: Apr 2005
Location: Columbus, OH
Posts: 18,162
|
IP address: 71.226.82.73
Reverse DNS: c-71-226-82-73.hsd1.fl.comcast.net. Reverse DNS authenticity: [Unknown] ASN: 22909 ASN Name: DNEO-OSP1 IP range connectivity: 4 Registrar (per ASN): ARIN Country (per IP registrar): US [United States] Country Currency: USD [United States Dollars] Country IP Range: 71.192.0.0 to 71.255.255.255 Country fraud profile: Normal City (per outside source): Lady Lake, Florida Country (per outside source): US [United States] Private (internal) IP? No IP address registrar: BOGUS Known Proxy? No |
||
|
01-18-2007, 08:24 AM
|
|
|
Banned
Join Date: Apr 2005
Location: Columbus, OH
Posts: 18,162
|
Port 25 and 110 are open (SMTP and POP).
|
||
|
01-18-2007, 08:37 AM
|
|
|
Senior Member
Join Date: Jun 2000
Location: N. Phoenix AZ USA
Posts: 28,943
|
HD,
So the IP address is no good or fake? This is coming from someone trying to scam me. Caught them and have not paid a penny but trying to find out where its coming from. It was supposed to be a Yahoo email address but keep seeing other IP addresses. Its being sent out of an email program called "The Bat!" Thx, Joe A
__________________
2013 Jag XF, 2002 Dodge Ram 2500 Cummins (the workhorse), 1992 Jaguar XJ S-3 V-12 VDP (one of only 100 examples made), 1969 Jaguar XJ (been in the family since new), 1985 911 Targa backdated to 1973 RS specs with a 3.6 shoehorned in the back, 1959 Austin Healey Sprite (former SCCA H-Prod), 1995 BMW R1100RSL, 1971 & '72 BMW R75/5 "Toaster," Ural Tourist w/sidecar, 1949 Aeronca Sedan / QB |
||
|
01-18-2007, 08:40 AM
|
|
|
Registered
Join Date: Mar 2003
Posts: 10,318
|
The Bat is a windows email client...
Address is in a pool of dynamic addresses. I just ran nmap on it (port scanner), looks like it is hooked up directly to a windows box with no router/firewall/etc. running. Code:
root@host:~# nmap -sS -O -PI -PT 71.226.82.73 Starting nmap 3.81 ( http://www.insecure.org/nmap/ ) at 2007-01-18 13:04 EST Interesting ports on c-71-226-82-73.hsd1.fl.comcast.net (71.226.82.73): (The 1653 ports scanned but not shown below are in state: closed) PORT STATE SERVICE 135/tcp filtered msrpc 136/tcp filtered profile 137/tcp filtered netbios-ns 138/tcp filtered netbios-dgm 139/tcp filtered netbios-ssn 445/tcp filtered microsoft-ds 1025/tcp open NFS-or-IIS 1026/tcp open LSA-or-nterm 1080/tcp filtered socks 5000/tcp open UPnP Device type: general purpose Running: Microsoft Windows 95/98/ME|NT/2K/XP OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Pro or Advanced Server, or Windows XP Nmap finished: 1 IP address (1 host up) scanned in 6.454 seconds
__________________
“IN MY EXPERIENCE, SUSAN, WITHIN THEIR HEADS TOO MANY HUMANS SPEND A LOT OF TIME IN THE MIDDLE OF WARS THAT HAPPENED CENTURIES AGO.” |
||
|
01-18-2007, 09:07 AM
|
|
|
|
Banned
Join Date: Apr 2005
Location: Columbus, OH
Posts: 18,162
|
Joe, its a real address.
Joe, there are certain *ahem* actions that could be taken, but seeing as that they are on Comcast, we may have the wrong IP. In other words, they use dynamic addresses, and we may end up targeting the wrong person. What is this joker trying to do? |
||
|
01-18-2007, 09:32 AM
|
|
|
Senior Member
Join Date: Jun 2000
Location: N. Phoenix AZ USA
Posts: 28,943
|
Will email you directly.
__________________
2013 Jag XF, 2002 Dodge Ram 2500 Cummins (the workhorse), 1992 Jaguar XJ S-3 V-12 VDP (one of only 100 examples made), 1969 Jaguar XJ (been in the family since new), 1985 911 Targa backdated to 1973 RS specs with a 3.6 shoehorned in the back, 1959 Austin Healey Sprite (former SCCA H-Prod), 1995 BMW R1100RSL, 1971 & '72 BMW R75/5 "Toaster," Ural Tourist w/sidecar, 1949 Aeronca Sedan / QB |
||
|
01-18-2007, 09:53 AM
|
|
|
Monkey+Football
|
Quote:
This could be fun. How pissed are you at these folks Joe?
__________________
<Insert witty comment> 85 Targa Wong Chip Fabspeed M&K Bilsteins and a bunch of other stuff. |
||
|
01-18-2007, 09:59 AM
|
|
|
Registered
Join Date: Mar 2003
Posts: 10,318
|
Icemaster - note that the address is in a dhcp pool, and my scan didn't show 25 or 110 open like harddrive's did... different computer now. No need to mess up some poor granny's collection of pix of her grandkids...
__________________
“IN MY EXPERIENCE, SUSAN, WITHIN THEIR HEADS TOO MANY HUMANS SPEND A LOT OF TIME IN THE MIDDLE OF WARS THAT HAPPENED CENTURIES AGO.” |
||
|
01-18-2007, 10:03 AM
|
|
|
Senior Member
Join Date: Jun 2000
Location: N. Phoenix AZ USA
Posts: 28,943
|
Quote:
Trying to scam me out of $3000. I figured it out early but would love to turn these jerks into the law.
__________________
2013 Jag XF, 2002 Dodge Ram 2500 Cummins (the workhorse), 1992 Jaguar XJ S-3 V-12 VDP (one of only 100 examples made), 1969 Jaguar XJ (been in the family since new), 1985 911 Targa backdated to 1973 RS specs with a 3.6 shoehorned in the back, 1959 Austin Healey Sprite (former SCCA H-Prod), 1995 BMW R1100RSL, 1971 & '72 BMW R75/5 "Toaster," Ural Tourist w/sidecar, 1949 Aeronca Sedan / QB |
||
|
01-18-2007, 10:08 AM
|
|
|
Monkey+Football
|
Quote:
Best thing at this point would be to make Comcast aware of it. Not that that would do much...
__________________
<Insert witty comment> 85 Targa Wong Chip Fabspeed M&K Bilsteins and a bunch of other stuff. |
||
|
01-18-2007, 10:21 AM
|
|
|
|
Registered
Join Date: Nov 2001
Location: Las Vegas, NV, USA
Posts: 1,587
|
Joe that bad finally??
__________________
Jordi Riera '84 930 (modified) |
||
|
01-18-2007, 02:00 PM
|
|
|
Registered
Join Date: Nov 2001
Location: Las Vegas, NV, USA
Posts: 1,587
|
My latest nmap scan also shows a port 25 .... I doubt that grandma has an SMTP server setup .... doing a -p- also
__________________
Jordi Riera '84 930 (modified) |
||
|
01-18-2007, 02:30 PM
|
|
|
Senior Member
Join Date: Jun 2000
Location: N. Phoenix AZ USA
Posts: 28,943
|
Jordi,
Nothing new but the request to help by sending $3k came through a few days ago. I have not responded to it but would love to send them to jail or at least get them stopped from trying to screw people on the internet.
__________________
2013 Jag XF, 2002 Dodge Ram 2500 Cummins (the workhorse), 1992 Jaguar XJ S-3 V-12 VDP (one of only 100 examples made), 1969 Jaguar XJ (been in the family since new), 1985 911 Targa backdated to 1973 RS specs with a 3.6 shoehorned in the back, 1959 Austin Healey Sprite (former SCCA H-Prod), 1995 BMW R1100RSL, 1971 & '72 BMW R75/5 "Toaster," Ural Tourist w/sidecar, 1949 Aeronca Sedan / QB |
||
|
01-18-2007, 02:49 PM
|
|
|
Registered
Join Date: Nov 2001
Location: Las Vegas, NV, USA
Posts: 1,587
|
You told me the story on Monday over dinner ... sad, very sad ...
I think that the IP address still good, based in Florida (Lady Lake ?)
__________________
Jordi Riera '84 930 (modified) |
||
|
01-18-2007, 03:04 PM
|
|
|
Banned
Join Date: Apr 2005
Location: Columbus, OH
Posts: 18,162
|
Quote:
 .Let me do some.....adventuring, tomorrow. |
||
|
01-18-2007, 04:57 PM
|
|
|
Senior Member
Join Date: Jun 2000
Location: N. Phoenix AZ USA
Posts: 28,943
|
Thanks guys.
__________________
2013 Jag XF, 2002 Dodge Ram 2500 Cummins (the workhorse), 1992 Jaguar XJ S-3 V-12 VDP (one of only 100 examples made), 1969 Jaguar XJ (been in the family since new), 1985 911 Targa backdated to 1973 RS specs with a 3.6 shoehorned in the back, 1959 Austin Healey Sprite (former SCCA H-Prod), 1995 BMW R1100RSL, 1971 & '72 BMW R75/5 "Toaster," Ural Tourist w/sidecar, 1949 Aeronca Sedan / QB |
||
|
01-18-2007, 05:21 PM
|
|
|
Registered
Join Date: Nov 2001
Location: Las Vegas, NV, USA
Posts: 1,587
|
HardDrive .... Cain & Abel ARP functions??
__________________
Jordi Riera '84 930 (modified) |
||
|
01-18-2007, 06:41 PM
|
|
|
Registered
|
Here is a more recent nmap version scan:
Starting Nmap 4.20 ( http://insecure.org ) at 2007-01-19 00:40 PST Interesting ports on c-71-226-82-73.hsd1.fl.comcast.net (71.226.82.73): Not shown: 1687 closed ports PORT STATE SERVICE 135/tcp filtered msrpc 136/tcp filtered profile 137/tcp filtered netbios-ns 138/tcp filtered netbios-dgm 139/tcp filtered netbios-ssn 445/tcp filtered microsoft-ds 1025/tcp open NFS-or-IIS 1026/tcp open LSA-or-nterm 1080/tcp filtered socks 5000/tcp open UPnP Device type: general purpose|specialized Running (JUST GUESSING) : Microsoft Windows 2000|2003 (91%), Symbol Windows PocketPC/CE (86%) Aggressive OS guesses: Microsoft Windows 2000, SP0, SP1, or SP2 (91%), Microsoft Windows 2000 Server SP4 (90%), Microsoft Windows 2000 SP3 (89%), Microsoft Windows 2000 SP4 (89%), Microsoft Windows 2003 Server SP1 (88%), Symbol MC9060-G mobile computer (runs Microsoft Windows CE .NET 4.20) (86%), Microsoft Windows 2000 Server SP4 (85%) No exact OS matches for host (test conditions non-ideal). Network Distance: 15 hops OS detection performed. Please report any incorrect results at http://insecure.org/nmap/submit/ . Nmap finished: 1 IP address (1 host up) scanned in 21.820 seconds 
__________________
Make sure to check out my balls in the Pelican Parts Catalog! 917 inspired shift knobs. '84 Targa - Arena Red - AX #104 '07 Toyota Camry Hybrid - Yes, I'm that guy... '01 Toyota Corolla - Urban Camouflage - SOLD |
||
|
01-18-2007, 11:44 PM
|
|
1984 Porsche Targa 3.2L
