Re: [cobalt-security] Logcheck, IP address

["Carrie Bartkowiak" <ravencarrie@xxxxxxxx>]

> I see two IP addresses but I want to chase down the 144.134.44.127
IP.

Todd,
You can take this IP to any lookup source on the net (SamSpade.com is
one) and do a whois lookup on them, a traceroute, and all sorts of
other things. Use the info you find there to trace down the companies
that own the IP, and *their* provider, and *their* provider, etc. etc.

If you've got whois installed on your machine, you can also do a
simple lookup from your command line, "man whois" (no quotes) for
instructions and options.
Good luck, and don't do a knee-jerk reaction before you're sure it's
not one of your clients typing in something wrong while he's half
asleep or being deluged by screaming children.  ;)

CarrieB