如何查找IP地址所有者

时间:2020-01-09 10:38:23  来源:igfitidea点击:

服务器收到大量来自某几个IP的垃圾邮件。
如何找到IP地址的所有者并将其报告给有关方面?

Internet上的所有公共IP地址都已注册到ISP或所有者或更大的组织。
每个IP地址都记录在whois数据库中。
您可以使用whois命令行客户端查询该数据库,以获取所有者名称,电话,电子邮件地址等Internet信息。

查找主机名的IP地址

例如,要查找www.theitroad.local的IP地址,请打开命令行并执行:

host www.theitroad.local

或者

nslookup www.theitroad.local

输出示例:

www.theitroad.local has address 10.16.48.99
www.theitroad.local has IPv6 address 2607:f0d0:1002:11::4

10.16.48.99是IPv4地址,2607:f0d0:1002:11 :: 4是www.theitroad.local主机名的IPv6地址。

Whois目录服务的whois客户端

执行以下命令以查找名为10.16.48.99的IP地址的所有者:

$ whois 10.16.48.99

输出示例:

OrgName:    SoftLayer Technologies Inc. 
OrgID:      SOFTL
Address:    1950 N Stemmons Freeway
City:       Dallas
StateProv:  TX
PostalCode: 75207
Country:    US

ReferralServer: rwhois://rwhois.softlayer.com:4321

NetRange:   10.16.0.0 - 10.16.255.255 
CIDR:       10.16.0.0/16 
OriginAS:   AS36351
NetName:    SOFTLAYER-4-4

RAbuseHandle: ABUSE1025-ARIN
RAbuseName:   Abuse 
RAbusePhone:  +1-214-442-0605
RAbuseEmail:  [email protected] 

RNOCHandle: IPADM258-ARIN
RNOCName:   IP Admin 
RNOCPhone:  +1-214-442-0600
RNOCEmail:  [email protected] 

OrgAbuseHandle: ABUSE1025-ARIN
OrgAbuseName:   Abuse 
OrgAbusePhone:  +1-214-442-0605
OrgAbuseEmail:  [email protected]

OrgTechHandle: IPADM258-ARIN
OrgTechName:   IP Admin 
OrgTechPhone:  +1-214-442-0600
OrgTechEmail:  [email protected]

# ARIN WHOIS database, last updated 2009-07-23 20:00
# Enter ? for additional hints on searching ARIN's WHOIS database.

Found a referral to rwhois.softlayer.com:4321.

%rwhois V-1.5:003fff:00 rwhois.softlayer.com (by Network Solutions, Inc. V-1.5.9.5)
network:Class-Name:network
network:ID:NETBLK-SOFTLAYER.10.16.32.0/19
network:Auth-Area:10.16.32.0/19
network:Network-Name:SOFTLAYER-10.16.32.0
network:IP-Network:10.16.48.96/29
network:IP-Network-Block:10.16.48.96-10.16.48.103
network:Updated-By:[email protected]

%referral rwhois://root.rwhois.net:4321/auth-area=.
%ok