1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Mass IP Whois Lookup

Discussion in 'BlackHat Lounge' started by quick_11, Jun 19, 2014.

  1. quick_11

    quick_11 Newbie

    Joined:
    Apr 12, 2013
    Messages:
    23
    Likes Received:
    1
    Let's say you've had 10k visitors to your website. About 100 of them visited your website from their workplace. You want to contact the employer of the visitor but you only have the IP address. How would you do it?

    What tool or command line would you use? What database? What's needed to filter out 10k IP addresses?

    Thanks!
     
  2. akacash

    akacash Jr. VIP Jr. VIP

    Joined:
    Jan 16, 2010
    Messages:
    805
    Likes Received:
    575
    Location:
    The Beach, USA
    Unless the company/business whose IP you have has registered with ARIN you don't. A lot of big corporations are their own ISP basically, unless that's the case though you won't be able to locate them that easily. For instance if Johnny works at the local store and visits your site, chances are you got the stores IP, the only problem is, more than likely that IP is just a regular Comcast IP, or maybe a Comcast Business IP. Since most of the residential networks also offer business plans, you'll usually wind with something from like Road Runner, Comcast, Verizon, etc. Most ISP's won't release subscriber information w/o a subpoena, so that's why you'll run into problems.
     
    • Thanks Thanks x 1
  3. quick_11

    quick_11 Newbie

    Joined:
    Apr 12, 2013
    Messages:
    23
    Likes Received:
    1
    Hm yeah, I get that, thanks. But if it is registered with ARIN or RIPE (?), which some are, then I can do it? What's the best way here?
     
  4. quick_11

    quick_11 Newbie

    Joined:
    Apr 12, 2013
    Messages:
    23
    Likes Received:
    1
    A mass reverse DNS lookup would suffice already, I think? Get the unique domains, browse the site and find contact information?
     
  5. the_demon

    the_demon Jr. Executive VIP

    Joined:
    Nov 23, 2008
    Messages:
    3,177
    Likes Received:
    1,563
    Occupation:
    Search Engine Marketing
    Location:
    The Internet
    • Thanks Thanks x 1
  6. cyber.surfer

    cyber.surfer Regular Member

    Joined:
    Feb 27, 2012
    Messages:
    253
    Likes Received:
    102
    Find the company by the browsing the ip or reverse ip address looking and then contact the employer using facebook graph search or linkedin. Google Analytics might come handy as well.
    Sometimes scanning the ports of an ip-address helps too.
     
    • Thanks Thanks x 1