Notifications
Clear all

IP registrations

3 Posts
2 Users
0 Reactions
327 Views
(@adp77)
Active Member
Joined: 19 years ago
Posts: 12
Topic starter  

This isn't really part of the forensic's realm, but I thought I would ask anyway.

I've been looking at doing some country blocks at the FW level and have found some countries in whois registries that don't go with geographical region.

For example
63.150.129.120 registered to China, but APNIC says ARIN owns it, once you look it up in ARIN it has country code of CN.

Another similar one is
64.200.239.128 registered to Lebanon, but RIPE has no whois entry for it but ARIN has it labeled as Lebanon.

Any idea why these are like this?

thanks


   
Quote
(@walkabout_fr)
Trusted Member
Joined: 19 years ago
Posts: 67
 

I've just had a look and I'm a bit lost …

Where did you see these ip adresses were registered to China and Lebanon ?


   
ReplyQuote
(@adp77)
Active Member
Joined: 19 years ago
Posts: 12
Topic starter  

I found this site and I'm guessing they search through each of the WHOIS databases and filter by country code.

http//www.proxyserverprivacy.com/ipaddress_range.php


   
ReplyQuote
Share: