Security Basics mailing list archives
RE: Country based IPs
From: "Matthew F. Caldwell" <mattc () guarded net>
Date: Thu, 2 Oct 2003 14:12:17 -0400
Dale and Jbod, If you want a database download you can request it from ARIN, it's a difficult to parse format (to prevent spammers). HERE is the form have fun! http://www.arin.net/library/agreements/bulkwhois.pdf As part of our product neuSECURE, we maintain a database of all known netblocks from the sources ARIN, APNIC, RIPE, etc. The data is refreshed on a regular basis. We use this data to allow better macro correlation in our product. You can create rules that specify if you see something from a particular country,block,and ranges it can perform actions including block it at the firewall, email me, create a ticket etc. Matt Matthew F. Caldwell, CISSP Founder and Chief Security Officer GuardedNet, Inc. -----Original Message----- From: Dale Fay [mailto:dalef () merit edu] Sent: Thursday, October 02, 2003 12:26 PM To: jbod Cc: security-basics () securityfocus com Subject: Re: Country based IPs Such a list would be difficult to create and impossible to maintain. Netblocks are allocated from one of the four regional sources, ARIN, RIPE, APNIC and a new one in Latin America, based on the location of the requester, but could be used anywhere in the world. On Wed, Oct 01, 2003 at 05:56:01PM -0700, jbod wrote:
Does anyone have a list or know where to obtain one that shows IPs allocated based upon country - for the purpose of blocking ALL access from all non-US locations unless implicitly allowed. __________________________________ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com
------------------------------------------------------------------------ ---
------------------------------------------------------------------------ ---- -- Dale Fay Merit Systeam/RADB www.merit.edu www.radb.net ------------------------------------------------------------------------ --- ------------------------------------------------------------------------ ---- --------------------------------------------------------------------------- ----------------------------------------------------------------------------
Current thread:
- Country based IPs jbod (Oct 02)
- Re: Country based IPs Dale Fay (Oct 02)
- Re: Country based IPs Markus Rossi (Oct 02)
- RE: Country based IPs digitz (Oct 02)
- Re: Country based IPs ScoutMirim (Oct 02)
- RE: Country based IPs Burton M. Strauss III (Oct 08)
- <Possible follow-ups>
- RE: Country based IPs Thomas H. Roemer (Oct 02)
- Re: Country based IPs Fábio Alves (Oct 02)
- RE: Country based IPs Seyberth Allan R Contr AFRL/VSIO (Oct 02)
- Re: Country based IPs salgak (Oct 02)
- RE: Country based IPs Matthew F. Caldwell (Oct 02)
- Re: Country based IPs Meritt James (Oct 03)
- RE: Country based IPs James McKiernan (Oct 03)
- RE: Country based IPs Matthew F. Caldwell (Oct 03)
- Re: Country based IPs Meritt James (Oct 03)
- Re: Country based IPs Meritt James (Oct 03)
- Weird TCP 1755 port on freebsd box Rick Zhong (Oct 06)
- Re: Weird TCP 1755 port on freebsd box Ranjeet Shetye (Oct 06)
- Re: Weird TCP 1755 port on freebsd box Rick Zhong (Oct 06)
- Re: Weird TCP 1755 port on freebsd box Jackson Alley (Oct 08)