Trace IP

**orcutt989** · 06-23-2005, 04:51 PM

So I was sitting at my computer playing guitar and listening to music, when all of a sudden, Norton Internet Security notifies me that it has blocked an intrusion attempt. It tells me the IP address of the intruder, and tells me that it blocked it. So I decided to have a little fun and write it down.

(66.90.103.84) That was it, so I wrote it down.

Then I downloaded a IP tracing program, called "Magic Net Trace".

I entered in the IP, and this is what it gave me.

Originally Posted by Magic Net Trace

CustName: FDCservers.net LLC
Address: 141 w jackson blvd #1135
City: Chicago
StateProv: IL
PostalCode: 60604
Country: US
RegDate: 2004-06-07
Updated: 2004-06-07
NetRange: 66.90.103.0 - 66.90.103.255
CIDR: 66.90.103.0/24
NetName: FDCSERVERSNET
NetHandle: NET-66-90-103-0-1
Parent: NET-66-90-64-0-1
NetType: Reassigned
Comment:
RegDate: 2004-06-07
Updated: 2004-06-07
OrgAbuseHandle: ABUSE438-ARIN
OrgAbuseName: ABUSE department
OrgAbusePhone: +1-312-913-9304
OrgAbuseEmail: mailto:[email protected]
OrgNOCHandle: NOC1402-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-312-913-9304
OrgNOCEmail: mailto:[email protected]
OrgTechHandle: PKR5-ARIN
OrgTechName: Kral, Petr
OrgTechPhone: +1-312-933-1046
OrgTechEmail: mailto:[email protected]
Name: Kral, Petr
Handle: PKR5-ARIN
Company: FDCservers.net LLC
Address: 141 West Jackson Blvd, Suite 1135
City: Chicago
StateProv: IL
PostalCode: 60604
Country: US
Comment:
RegDate: 2003-05-20
Updated: 2003-05-20
Phone: +1-312-933-1046 (Office)
Email: mailto:[email protected]

I am thinking about sending an email asking why they tried to connect to me. Does anyone have any better ideas?

**99%** · 06-23-2005, 05:00 PM

**Virtualbody1234** · 06-23-2005, 05:56 PM

Originally Posted by orcutt989

Does anyone have any better ideas?

Yeah. Just forget about it. Norton did it's job of blocking it.

**orcutt989** · 06-23-2005, 06:40 PM

Originally Posted by 99%

Haha oh great. My program said it was from Chicago, and your website said it was from Gainesville, Florida. Haha.

**lynx** · 06-23-2005, 07:12 PM

Mine says it is Chicago too.

But that's probably just an ISP or a proxy server, not an end user.

If it is an ISP, probably one of their clients is infected with a trojan.
If it is a proxy server, you aren't going to be able to trace it back, and if you could you would probably simply find it is someone infected with a trojan.

Don't worry about it, it happens all the time.

As VB says NIS is doing it's job. They are simply saying "look how good we are". Of course, when they miss one they'll tell you about that too, won't they.