Re: nbtstat displays different computer name In the Usenet newsgroup alt.computer.security, in article
<1121408767.881275.156760@g49g2000cwa.googlegroups .com>, valvowski wrote:
>does anybody know what tool was used that generates different computer
>name everytime i execute nbtstat on a single ip address? it is really
>hard to trace which pc the ip address belongs.
Is the "other" computer local? Use a packet sniffer, and get the
MAC address. If the other computer is not local, and is not using
a reserved IP address (see RFC3330), google for a 'whois' tool.
>NNTP-Posting-Host: 210.1.130.2
[compton ~]$ whois -h whois.apnic.net 210.1.130.2
inetnum: 210.1.130.0 - 210.1.130.255
netname: PIPH-LL
country: PH
descr: Pacific Internet PH
descr: LL IP Pool
address: Pacific Internet Philippines, Inc.
address: 19F, The Taipan Place,
address: Emerald Ave., Ortigas Center,
address: Pasig City, Philippines
phone: +63-2-6371700
fax-no: +63-2-9180159
[compton ~]$
Old guy |