I think the "whois" cmd..... If that's not it, neotrace from neoworx is a good prog. They were supposed to come out with a linux version, but since mcaffee aquired them, I'm not sure if they have or not. www.networksolutions.com used to have a page you could look it up as well. Hope it works!! -----Original Message----- From: snafuu-bounce@xxxxxxxxxxxxxxxxx [mailto:snafuu-bounce@xxxxxxxxxxxxxxxxx]On Behalf Of phrostie Sent: Monday, November 12, 2001 8:50 PM To: snafuu@xxxxxxxxxxxxx Subject: [snafuu] port 80 scans Since nov 9th i've been getting hit with scans on port 80 everyday. which virus was it that did this? also how can i find the "owner" of an IP address. this is a first for me.