Re: Re[2]: Determining the country of orgin for IP address(es)

From: Mally Mclane (mally@ripe.net)
Date: 02/27/02


Date: Wed, 27 Feb 2002 09:37:14 +0100
From: Mally Mclane <mally@ripe.net>
To: Rzac` <bugtrack@mail.ru>, <incidents@securityfocus.com>

On 26/2/02 22:09, "Rzac`" <bugtrack@mail.ru> wrote:

>
> On 26/Feb/2002, Glenn Forbes Flemin Larratt wrote:
> GFFL> It may have been the theory that IP ranges were geographically
> GFFL> organized, but that's long since gone the way of all things.
> GFFL> (...)
>
> Indeed, I have a client of mine here in Europe using part of an IP
> address block allocated to its American mother company that is listed
> on ARIN. Looking up the IP address on the registries would let you
> think it is US-based, which is wrong.

Ips are geographically organised by Regional Internet Registry. Doing a
query on the approiate whois database would give you a (say 85%?) fairly
accurate geographical lookup.

Cheers,

Mally Mclane
RIPE NCC Operations

Sent using the Entourage X Test Drive.

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com


Quantcast