RE: Geography of an IP Address

["LeGrow, Matt" <Matt_LeGrow () NAI com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Its hard to say; you can at least get an idea of exactly who provided
that person, or that person's provider's provider, by performing a
whois lookup with whois.arin.net on their network IP (i.e. whois -h
whois.arin.net 192.168.255.0)  From there you can take the issue up
with the service provider or the owner of the block.  

However in most cases without a coordinated effort of monitoring the
data multiple times, verifying which routers or networks the data
hopped through as it got to you, etc, etc., anything you may divine
may actually prove to be unreliable with even a moderately
sophisticated attacker masking himself with IP spoofing. 

Matt LeGrow
Network Associates, Inc.
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Note: Opinions expressed herein are most certainly NOT that of my
employer:-)


> -----Original Message-----
> From: board operator [mailto:bordop () juno com]
> Sent: Tuesday, October 12, 1999 5:27 PM
> To: hackers () egroups com
> Cc: alert () iss net; firewall-wizards () nfr net; dc-stuff () merde dis org
> Subject: Geography of an IP Address
>
>
> Hello alI...
>
> I was wondering if there's any way to trace the geography 
> (actual city or
> state, province etc.) of a person's static IP address. I know 
> that most
> have dynamic (changing) IP's but if I were to somehow obtain 
> their static
> IP, could I then begin an amateur trace to their physical location?
>
> TIA,
>
> Jay

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.1
Comment: Crypto Provided by Network Associates <http://www.nai.com>

iQA/AwUBOAX2HBzV4nRUHFtQEQK8HgCdHYqrhbT2QNcFVZmXobucOpGEmiQAnigU
QugC94Ti2h+TtuBHjIvmf10s
=TmB2
-----END PGP SIGNATURE-----