Security Basics mailing list archives
RE: Country based IPs
From: "Matthew F. Caldwell" <mattc () guarded net>
Date: Thu, 2 Oct 2003 14:12:17 -0400
Dale and Jbod,
If you want a database download you can request it from ARIN,
it's a difficult to parse format (to prevent spammers). HERE is the form
have fun!
http://www.arin.net/library/agreements/bulkwhois.pdf
As part of our product neuSECURE, we maintain a database of all known
netblocks from the sources ARIN, APNIC, RIPE, etc. The data is refreshed
on a regular basis. We use this data to allow better macro correlation
in our product. You can create rules that specify if you see something
from a particular country,block,and ranges it can perform actions
including block it at the firewall, email me, create a ticket etc.
Matt
Matthew F. Caldwell, CISSP
Founder and Chief Security Officer
GuardedNet, Inc.
-----Original Message-----
From: Dale Fay [mailto:dalef () merit edu]
Sent: Thursday, October 02, 2003 12:26 PM
To: jbod
Cc: security-basics () securityfocus com
Subject: Re: Country based IPs
Such a list would be difficult to create and impossible to
maintain. Netblocks are allocated from one of the four regional
sources, ARIN, RIPE, APNIC and a new one in Latin America, based on
the location of the requester, but could be used anywhere in the world.
On Wed, Oct 01, 2003 at 05:56:01PM -0700, jbod wrote:
Does anyone have a list or know where to obtain one that shows IPs allocated based upon country - for the purpose of blocking ALL access from all non-US locations unless implicitly allowed. __________________________________ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com
------------------------------------------------------------------------ ---
------------------------------------------------------------------------ ---- -- Dale Fay Merit Systeam/RADB www.merit.edu www.radb.net ------------------------------------------------------------------------ --- ------------------------------------------------------------------------ ---- --------------------------------------------------------------------------- ----------------------------------------------------------------------------
Current thread:
- Country based IPs jbod (Oct 02)
- Re: Country based IPs Dale Fay (Oct 02)
- Re: Country based IPs Markus Rossi (Oct 02)
- RE: Country based IPs digitz (Oct 02)
- Re: Country based IPs ScoutMirim (Oct 02)
- RE: Country based IPs Burton M. Strauss III (Oct 08)
- <Possible follow-ups>
- RE: Country based IPs Thomas H. Roemer (Oct 02)
- Re: Country based IPs Fábio Alves (Oct 02)
- RE: Country based IPs Seyberth Allan R Contr AFRL/VSIO (Oct 02)
- Re: Country based IPs salgak (Oct 02)
- RE: Country based IPs Matthew F. Caldwell (Oct 02)
- Re: Country based IPs Meritt James (Oct 03)
- RE: Country based IPs James McKiernan (Oct 03)
- RE: Country based IPs Matthew F. Caldwell (Oct 03)
- Re: Country based IPs Meritt James (Oct 03)
- Re: Country based IPs Meritt James (Oct 03)
- Weird TCP 1755 port on freebsd box Rick Zhong (Oct 06)
- Re: Weird TCP 1755 port on freebsd box Ranjeet Shetye (Oct 06)
- Re: Weird TCP 1755 port on freebsd box Rick Zhong (Oct 06)
- Re: Weird TCP 1755 port on freebsd box Jackson Alley (Oct 08)
