Finding ASN from IP address

Suresh Ramasubramanian suresh at outblaze.com
Thu Oct 9 17:46:17 UTC 2003


Avleen Vig writes on 10/9/2003 10:19 PM:

> I want to create a mapping of IP addresses to ASN, for a specific like
> of IP addresses. Eg:
>   1.2.3.4
>   12.34.56.78
> 
> etc, gathered from my system logs.
> 
> What is the best way of doing this?

Rob Thomas (cymru.com) has something like this - see below.

-- 
srs (postmaster|suresh)@outblaze.com // gpg : EDEDEFB9
manager, outblaze.com security and antispam operations


>     * To: apops at apops.net
>     * Subject: [apops] New Team Cymru IP2ASN whois server
>     * From: Rob Thomas <robt at cymru.com>
>     * Date: Fri, 26 Sep 2003 01:56:11 -0500 (CDT)
>     * List-archive: <http://www.apnic.net/mailing-lists/apops/>
>     * List-help: <mailto:apops-request at apops.net?subject=help>
>     * List-id: Asia Pacific Operators Forum <apops.apops.net>
>     * List-post: <mailto:apops at apops.net>
>     * List-subscribe: <http://mailman.apnic.net/mailman/listinfo/apops>,<mailto:apops-request at apops.net?subject=subscribe>
>     * List-unsubscribe: <http://mailman.apnic.net/mailman/listinfo/apops>,<mailto:apops-request at apops.net?subject=unsubscribe>
>     * Sender: apops-admin at apops.net
> 
> Fellow networkers,
> 
> Team Cymru is happy to announce the availability of a public whois
> server dedicated to mapping IP numbers to ASNs, located at
> whois.cymru.com.  You can find the link to this tool at:
> 
> http://www.cymru.com/BGP/whois.html
> 
> This link has been added to our main BGP data page available at:
> 
> http://www.cymru.com/BGP/index.html
> 
> We have also extended the functionality of this daemon to support BULK
> IP submissions for those who wish to further optimize their queries with
> netcat.
> 
> Following is a quick overview of how to use it:
> 
> $ whois -h whois.cymru.com <IP>
> 
> Where <IP> is replaced by the IP you'd like to map, like so:
> 
> $ whois -h whois.cymru.com 4.2.2.1
>     ASN |               IP | Name
>    3356 |          4.2.2.1 | LEVEL3 Level 3 Communications
> 
> You can also include port information, and/or timestamps in your
> queries.  Be sure to include quotes around your queries, or the daemon
> will interpret your request as multiple lines:
> 
> $ whois -h whois.cymru.com "4.2.2.1 -0600 GMT"
>     ASN |               IP |            Info | Name
>    3356 |          4.2.2.1 |       -0600 GMT | LEVEL3 Level 3
> Communications
> 
> For instructions on how to submit BULK queries via netcat, simply issue
> the following command:
> 
> $ whois -h whois.cymru.com help
> 
> We hope you find this tool useful.  Stay tuned for more features!
> 
> If you have any comments or suggestions as to how we might improve this
> service, feel free to let us know!
> 
> Thanks,
> Rob, for Team Cymru.
> -- 
> Rob Thomas
> http://www.cymru.com
> ASSERT(coffee != empty);
> 
> 




More information about the NANOG mailing list