7. Regional Internet Registry
The IANA (division of ICANN) function is also responsible for assigning IP addresses.
However, ICANN does not assign IP addresses directly or individually, but assigns them to the RIR by way of subnets. The RIRs are ultimately responsible for assigning IP addresses.
The IANA website provides information on what subnets were assigned to what RIR.
IPv4:
http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.xhtml
IPv6:
http://www.iana.org/assignments/ipv6-unicast-address-assignments/ipv6-unicast-address-assignments.xhtml
The RIPE NCC is the RIR responsible for the UK and Europe.
With
MaxMind,
it offers the option to filter specific (e.g. German) IP addresses.
(Click for more details.)
$ readonly COUNTRY="DE, Germany"
$ while read IP ; do
if geoiplookup "${IP}" \
| grep --fixed-strings "GeoIP Country Edition: ${COUNTRY}" \
> /dev/null 2>&1 ; then
printf "${IP}\n"
fi
done < ipliste.txt
109.91.139.34
136.243.48.82
136.243.48.83
136.243.48.84
136.243.48.85
136.243.48.86
141.8.141.145
[...]
(Here, I would refer as a supplement to "my" shell script
"geoipfilter".)
To whom or what was an IP address assigned?
Again, the RIRs offer WHOIS services for this purpose, e.g. http://ripe.net/whois.
And here are two more (already popular) options:
Linux/BSD/Unix
$ whois 94.136.40.161
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '94.136.40.0 - 94.136.40.255'
% Abuse contact for '94.136.40.0 - 94.136.40.255' is 'abuse@webfusion.com'
inetnum: 94.136.40.0 - 94.136.40.255
netname: UK-WEBFUSION-LEEDS
descr: ATLS-LB
country: GB
admin-c: HM2819-RIPE
tech-c: HM2819-RIPE
status: ASSIGNED PA
remarks: INFRA-AW
mnt-by: MNT-WEBFUSION
created: 2008-07-29T08:29:31Z
last-modified: 2010-08-12T13:57:15Z
source: RIPE
role: Hostmaster Contact
address: Unit 4
address: The Tristram Centre
address: Brown Lane West
address: Leeds
address: LS12 6BF
address: United Kingdom
admin-c: PB11287-RIPE
admin-c: AC23366-RIPE
tech-c: PB11287-RIPE
tech-c: AC23366-RIPE
nic-hdl: HM2819-RIPE
abuse-mailbox: abuse@webfusion.com
remarks: ------------------------------------------------------
remarks:
remarks: Please direct Abuse complaints to abuse@webfusion.com
remarks: Complaints directed elsewhere will not be actioned.
remarks:
remarks: ------------------------------------------------------
mnt-by: MNT-WEBFUSION
created: 2008-06-12T07:38:24Z
last-modified: 2015-01-12T16:51:25Z
source: RIPE # Filtered
% Information related to '94.136.40.0/24AS20738'
route: 94.136.40.0/24
descr: Webfusion Internet Solutions
origin: AS20738
member-of: AS20738:RS-CUSTOMER
remarks:
remarks: ------------------------------------------------------
remarks:
remarks: Please direct Abuse complaints to abuse@webfusion.com
remarks: Complaints directed elsewhere will not be actioned.
remarks:
remarks: ------------------------------------------------------
remarks:
mnt-by: MNT-WEBFUSION
created: 2008-07-22T10:31:49Z
last-modified: 2008-07-22T10:31:49Z
source: RIPE # Filtered
% This query was served by the RIPE Database Query Service version 1.87.4 (BLAARKOP)
eToolz
Web-Whois
For example, "94.136.40.161" is a subnet consisting of a maximum of 254 assignable IPv4 addresses the RIPE NCC assigned to 1&1 Internet AG via detours.
However, beware that you cannot always rely on this entry to be true.
Customers renting dedicated servers are regularly entitled to register corresponding IPv4 networks in their names.
And if these customers have "skeletons in their cupboards", they obviously cannot be trusted.
The entry relating to the AUT-NUM object represented by the ASN typically refers to an ISP that is more trustworthy.
In the last example, the /24 subnet stands.
(On the German sister site
"domain-ermittlung.de",
you will find an example for a /16 subnet.)