Re: Re[2]: Determining the country of orgin for IP address(es)
From: Mally Mclane (mally@ripe.net)Date: 02/27/02
- Previous message: Paul Gear: "Re: NTP scan ????"
- In reply to: Rzac`: "Re[2]: Determining the country of orgin for IP address(es)"
- Next in thread: Neil Dickey: "Re: Determining the country of orgin for IP address(es)"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 27 Feb 2002 09:37:14 +0100 From: Mally Mclane <mally@ripe.net> To: Rzac` <bugtrack@mail.ru>, <incidents@securityfocus.com>
On 26/2/02 22:09, "Rzac`" <bugtrack@mail.ru> wrote:
>
> On 26/Feb/2002, Glenn Forbes Flemin Larratt wrote:
> GFFL> It may have been the theory that IP ranges were geographically
> GFFL> organized, but that's long since gone the way of all things.
> GFFL> (...)
>
> Indeed, I have a client of mine here in Europe using part of an IP
> address block allocated to its American mother company that is listed
> on ARIN. Looking up the IP address on the registries would let you
> think it is US-based, which is wrong.
Ips are geographically organised by Regional Internet Registry. Doing a
query on the approiate whois database would give you a (say 85%?) fairly
accurate geographical lookup.
Cheers,
Mally Mclane
RIPE NCC Operations
Sent using the Entourage X Test Drive.
----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com
- Previous message: Paul Gear: "Re: NTP scan ????"
- In reply to: Rzac`: "Re[2]: Determining the country of orgin for IP address(es)"
- Next in thread: Neil Dickey: "Re: Determining the country of orgin for IP address(es)"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]