RE: Geography of an IP Address

From: LeGrow, Matt (Matt_LeGrowat_private)
Date: Thu Oct 14 1999 - 08:26:19 PDT

  • Next message: Darren Reed: "Secure Syslog"

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1
    
    Its hard to say; you can at least get an idea of exactly who provided
    that person, or that person's provider's provider, by performing a
    whois lookup with whois.arin.net on their network IP (i.e. whois -h
    whois.arin.net 192.168.255.0)  From there you can take the issue up
    with the service provider or the owner of the block.  
    
    However in most cases without a coordinated effort of monitoring the
    data multiple times, verifying which routers or networks the data
    hopped through as it got to you, etc, etc., anything you may divine
    may actually prove to be unreliable with even a moderately
    sophisticated attacker masking himself with IP spoofing. 
    
    Matt LeGrow
    Network Associates, Inc.
    =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
    Note : Opinions expressed herein are most certainly NOT that of my
    employer :-)
    
    
    > -----Original Message-----
    > From: board operator [mailto:bordopat_private]
    > Sent: Tuesday, October 12, 1999 5:27 PM
    > To: hackersat_private
    > Cc: alertat_private; firewall-wizardsat_private; dc-stuffat_private
    > Subject: Geography of an IP Address
    > 
    > 
    > Hello alI...
    > 
    > I was wondering if there's any way to trace the geography 
    > (actual city or
    > state, province etc.) of a person's static IP address. I know 
    > that most
    > have dynamic (changing) IP's but if I were to somehow obtain 
    > their static
    > IP, could I then begin an amateur trace to their physical location?
    > 
    > TIA,
    > 
    > Jay
    > 
    
    -----BEGIN PGP SIGNATURE-----
    Version: PGP 6.5.1
    Comment: Crypto Provided by Network Associates <http://www.nai.com>
    
    iQA/AwUBOAX2HBzV4nRUHFtQEQK8HgCdHYqrhbT2QNcFVZmXobucOpGEmiQAnigU
    QugC94Ti2h+TtuBHjIvmf10s
    =TmB2
    -----END PGP SIGNATURE-----
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 13:43:41 PDT