Attack from a reserved address

Matthew Gillen me at mattgillen.net
Wed Aug 30 18:56:42 EDT 2006


Bill Horne wrote:
> Thanks for reading this. I'm getting attacked from a "reserved" IP address, 
> and I'm looking for help to find out where it really is.

You could always 'traceroute' back to it.  A lot of backbone routers
actually have their location embedded in their DNS name.  For example, you
can see that my route to google goes to New York.:
$ traceroute google.com
 1  c-3-0-ubr06.maynard.ma.boston.comcast.net (73.171.244.1)  19.110 ms
 2  ge-1-42-ur01.maynard.ma.boston.comcast.net (68.87.156.169)  20.705 ms
 3  te-8-1-ur01.framingham.ma.boston.comcast.net (68.87.144.125)  17.118 ms
 4  10g-9-1-ur01.westroxbury.ma.boston.comcast.net (68.87.144.121) 13.457 ms
 5  10g-7-1-ar02.needham.ma.boston.comcast.net (68.87.145.53)  9.825 ms
 6  12.125.47.49 (12.125.47.49)  10.514 ms
 7  gbr2-a31s3.cb1ma.ip.att.net (12.127.5.42)  17.402 ms
 8  tbr2-cl16.n54ny.ip.att.net (12.122.10.22)  12.971 ms
 9  ggr2-p3120.n54ny.ip.att.net (12.123.3.109)  12.386 ms
10  192.205.33.94 (192.205.33.94)  24.872 ms
11  ae-21-56.car1.NewYork1.Level3.net (4.68.97.180)  26.775 ms
12  4.78.164.70 (4.78.164.70)  22.255 ms
13  72.14.236.215 (72.14.236.215)  13.965 ms
14  72.14.233.115 (72.14.233.115)  29.120 ms
15  66.249.94.94 (66.249.94.94)  29.243 ms
16  66.249.94.118 (66.249.94.118)  40.554 ms
17  72.14.207.99 (72.14.207.99)  30.333 ms

Matt

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.




More information about the Discuss mailing list