[NBLUG/talk] webserver abuse

[E Frank Ball]

On Tue, Jan 25, 2005 at 12:34:34PM -0800, Bob Blick wrote:
} > Pretty cool!
} >
} > Could you enlighten me how you figure out the 80.191 to be Iran?
} 
} I'm not 100% sure, just fairly confident, I tried whois on several
} addresses, they were all Iran.
} 
} Here's a convenient whois gateway you can use from the web:
} 
} http://www.zoneedit.com/whois.html

"jwhois" is a great command line lookup tool:

% jwhois 80.191.0.0
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html

inetnum:      80.191.0.0 - 80.191.0.255
netname:      MOI
descr:        ministry of interior affairs
country:      IR
admin-c:      HB8123-RIPE
tech-c:       HB8123-RIPE
status:       ASSIGNED PA
mnt-by:       as12880-mnt
changed:      bazargani at mail.dci.co.ir 20021110
source:       RIPE

route:        80.191.0.0/16
descr:        DCI-Route
origin:       AS12880
mnt-by:       AS12880-MNT
changed:      alipour at mail.dci.co.ir 20041213
source:       RIPE

person:       Hojatollah Behrooz
address:      ministry of interior building.
address:      fatemy Ave. , Tehran
address:      Iran


% jwhois 80.191.255.255
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html

inetnum:      80.191.255.192 - 80.191.255.255
netname:      chaloos-net
descr:        Andisheh rayaneh chaloos,isp
country:      IR

-- 

   E Frank Ball                frankb at frankb.us