(info from kcr)
> > Can you tell me yet again how to find out where an IP address is. 
 
> let's say you were trying to figure out 66.30.27.115.
 
> First, try reverse-resolving it:
 
> $ host 66.30.27.115
> Name: h0000f80456cf.ne.client2.attbi.com
> Address: 66.30.27.115
> 
> That can often tell you something (the ne might be a clue), but often it doesn't.
> 
> Ask ARIN:
> 
> $ whois -h whois.arin.net 66.30.27.115
> 
> OrgName:    Comcast Cable Communications Holdings, Inc 
> OrgID:      CCCH-3
> Address:    1800 Bishops Gate Blvd
> City:       Mt Laurel
> StateProv:  NJ
> PostalCode: 08054
> Country:    US
> 
> NetRange:   66.30.0.0 - 66.30.31.255 
> CIDR:       66.30.0.0/19 
> NetName:    RW2-NORTHEAST-6
> NetHandle:  NET-66-30-0-0-1
> Parent:     NET-66-0-0-0-0
> NetType:    Direct Allocation
> NameServer: NS4.ATTBB.NET
> NameServer: NS5.ATTBB.NET
> NameServer: NS6.ATTBB.NET
> Comment:    
> RegDate:    2002-01-31
> Updated:    2003-08-06
> 
> OrgAbuseHandle: NAPO-ARIN
> OrgAbuseName:   Network Abuse and Policy Observance 
> OrgAbusePhone:  +1-856-317-7272
> OrgAbuseEmail:  abuse@comcast.net
> 
> OrgTechHandle: IC161-ARIN
> OrgTechName:   Comcast Cable Communications Inc 
> OrgTechPhone:  +1-856-317-7200
> OrgTechEmail:  cips_ip-registration@cable.comcast.com
> 
> # ARIN WHOIS database, last updated 2004-05-01 19:15
> # Enter ? for additional hints on searching ARIN's WHOIS database.
> 
> So it's an IP address belonging to a cable modem in the northeast somewhere
> (Cambridge, as it happens :-).
> 
> ARIN is only repsonsible for stuff on this side of the pond, but often
> knows who to talk to for foreign addresses; useful if you have a whois
> client that deals with referrals:
> 
> $ whois -h whois.arin.net 193.10.66.195
> 
> OrgName:    RIPE Network Coordination Centre 
> OrgID:      RIPE
> Address:    Singel 258
> Address:    1016 AB
> City:       Amsterdam
> StateProv:  
> PostalCode: 
> Country:    NL
> 
> ReferralServer: whois://whois.ripe.net
> 
> NetRange:   193.0.0.0 - 193.255.255.255 
> CIDR:       193.0.0.0/8 
> NetName:    RIPE-CBLK
> NetHandle:  NET-193-0-0-0-1
> Parent:     
> NetType:    Allocated to RIPE NCC
> NameServer: NS-PRI.RIPE.NET
> NameServer: NS2.NIC.FR
> NameServer: SUNIC.SUNET.SE
> NameServer: AUTH03.NS.UU.NET
> NameServer: SEC1.APNIC.NET
> NameServer: SEC3.APNIC.NET
> NameServer: TINNIE.ARIN.NET
> Comment:    These addresses have been further assigned to users in
> Comment:    the RIPE NCC region. Contact information can be found in
> Comment:    the RIPE database at http://www.ripe.net/whois
> RegDate:    1992-08-12
> Updated:    2004-03-16
> 
> OrgTechHandle: RIPE-NCC-ARIN
> OrgTechName:   RIPE NCC Hostmaster 
> OrgTechPhone:  +31 20 535 4444
> OrgTechEmail:  search-ripe-ncc-not-arin@ripe.net
> 
> # ARIN WHOIS database, last updated 2004-05-01 19:15
> # Enter ? for additional hints on searching ARIN's WHOIS database.
> 
> 
> Found a referral to whois.ripe.net.
> 
> % This is the RIPE Whois server.
> % The objects are in RPSL format.
> %
> % Rights restricted by copyright.
> % See http://www.ripe.net/ripencc/pub-services/db/copyright.html
> 
> inetnum:      193.10.64.0 - 193.10.67.255
> netname:      SE-SICS
> descr:        Swedish Institute of Computer Science
> country:      SE
> admin-c:      sics1-RIPE
> tech-c:       sics1-RIPE
> status:       ASSIGNED PI
> mnt-by:       SUNET-MNT
> changed:      fredrik@sunet.se 20040129
> source:       RIPE
> 
> route:        193.10.0.0/16
> descr:        SUNET C Aggregate
> origin:       AS1653
> mnt-by:       SUNET-MNT
> changed:      bc@sunet.se 19950413
> source:       RIPE
> 
> role:         Swedish Institute of Computer Science
> address:      Swedish Institute of Computer Science
> address:      Box 1263
> address:      S-164 29 Kista
> address:      Sweden
> phone:        +46 8 633 1500
> fax-no:       +46 8 751 7230
> e-mail:       staff@sics.se
> admin-c:      orlo1-RIPE
> tech-c:       mine1-RIPE
> nic-hdl:      sics1-RIPE
> mnt-by:       SUNET-MNT
> changed:      fredrik@sunet.se 20040128
> source:       RIPE