Reverse DNS lookup and whois for IP in alert windows

[kail]

Was that reply for me?

Anyway, this particular wish has been around a bit longer than 3 years. However, not all views are the same…

@Siers post:134

It would be great if in alert message near IP address will be shown HOST (:CLP) …

@iamme99 post:135

I would also like to see this info. However, there are some problems that could make this difficult.

1. Depending on the speed of your connection or the response time of the hops, the time it takes to run a background trace route might be excessive.

2. I’ve been watching and checking IP addresses presented by Comodo. A lot of time, the IP resolution leads to useless info. For instance, the IP address might resolve to a site like Akami (an edge hosting company which a lot of big companies use). Other times, the resolution is to some hosting company or even to a site with no name (even for reputable sites). There isn’t much you can do with this info except OK it if you want to see whatever content it is trying to retrieve.

@jobeard post:141

Agree – reverse lookup is a real performance problem and if the log is seldomly viewed, a
total waste of time. (:AGY)
Extraction of the log and performing your own NSLOOKUP $IP is easy
and only those users what that info need spend the time doing so.

But, don’t get me wrong. I’m not personally against this wish, I’m actually for it. However, it should probably go hand-in-hand with a second wish… that you can (a) turn it off and that it is (b) off by default.