Security Basics mailing list archives

Investigation- Web pages visited


From: "Steve Barron" <thurgoodj187 () hotmail com>
Date: Wed, 02 Nov 2005 19:09:05 +0000

Hi

I am trying to investigate some possible corporate policy violations, mostly involving porn. My IDS matches rules for certain criteria and looks for banned words in html. When I get the ip, i can query it, but most of the time I get info about a hosting provider. When I attempt to access the ip http://155.X.X.X i get either some generic page or a 404 error. Is there any way to find out what sites are hosted at a given IP? My logs have not been much help for this.

Thanks

Steve



Current thread: