Security Incidents mailing list archives

Re: Re[2]: Determining the country of orgin for IP address(es)


From: Mally Mclane <mally () ripe net>
Date: Wed, 27 Feb 2002 09:37:14 +0100

On 26/2/02 22:09, "Rzac`" <bugtrack () mail ru> wrote:


On 26/Feb/2002, Glenn Forbes Flemin Larratt wrote:
GFFL> It may have been the theory that IP ranges were geographically
GFFL> organized, but that's long since gone the way of all things.
GFFL> (...)

Indeed, I have a client of mine here in Europe using part of an IP
address block allocated to its American mother company that is listed
on ARIN.  Looking up the IP address on the registries would let you
think it is US-based, which is wrong.

Ips are geographically organised by Regional Internet Registry. Doing a
query on the approiate whois database would give you a (say 85%?) fairly
accurate geographical lookup.

Cheers,


Mally Mclane
RIPE NCC Operations



































































Sent using the Entourage X Test Drive.


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: