IP reserved by IANA.org? 1

[Grenage]

A computer attempted to access our e-mail server, the request came from 89.192.11.14. Now I know that we all get hundreds of attempts every day on our servers; but what I am curious about is that when entered on a WHOIS lookup, it is returned as "IP range reserved by IANA".

I can safely assume this means that the IP was spoofed then?


Carlsberg don't run I.T departments, but if they did they'd probably be more fun.

 

[segment]

I don't know what lookup you did but that address is assigned to Orange in the UK.

inetnum: 89.192.0.0 - 89.193.255.255
netname: ORANGE-GPRS-NET
descr: Orange PCS GPRS services
country: GB
admin-c: ORA1-RIPE
tech-c: ORA1-RIPE
status: ASSIGNED PA
mnt-by: AS12576-MNT
mnt-lower: AS12576-MNT
mnt-routes: AS12576-MNT
source: RIPE # Filtered

role: Orange PCS RIPE Administration
address: St. James Court
address: Great Park Road
address: Almondsbury Park
address: Bradley Stoke
address: Bristol
address: BS32 4QJ
address: United Kingdom
phone: +44-(0)1454 624 600
fax-no: +44-(0)1454 618 501
admin-c: PB6739-RIPE
admin-c: JG2161-RIPE
tech-c: PB6739-RIPE
tech-c: JG2161-RIPE
remarks: *********************!!!PLEASE READ!!! ***********************
remarks:
remarks: USE INDIVIDUAL CONTACT EMAILS FOR RIPE ISSUES ONLY
remarks: USE ABUSE-EMAIL BELOW FOR SPAM AND ABUSE ISSUES
remarks: VISIT

http://www.orange.co.uk/helpandsupport

FOR MOBILE AND ORANGE.NET SUPPORT ISSUES
remarks: EXPECT NO RESPONSE TO NON-COMPLIANT COMMUNICATIONS
remarks:
remarks: *********************!!!PLEASE READ!!! ***********************
remarks: trouble: abuse-email: technical.security@orange.co.uk
nic-hdl: ORA1-RIPE
mnt-by: AS12576-MNT
source: RIPE # Filtered
abuse-mailbox: technical.security@orange.co.uk

perl -e 'print $i=pack(c5,(40*2),sqrt(7600),(unpack(c,Q)-3+1+3+3-7),oct(104),10,oct(101));'

 

[Grenage]

Ah thank you kindly for that. I used samspade.org, can't imagine why I received the original result though. I appreciate your reply because it certainly answers one of the questions I had regardign it's source


Carlsberg don't run I.T departments, but if they did they'd probably be more fun.

 

[baddos]

Remember that there is 3 IP authorities (US/Europe/Asia). Different IP ranges have to use their appropriate website to lookup the IP information.

 

[sleipnir214]

There's more than three.

Counting ARIN (arin.net), there are 5:

http://www.arin.net/community/rirs.html

Want the best answers? Ask the best questions! TANSTAAFL!

 

[Grenage]

Ah of course, that would it explain it. For some reason I just assumed that the queries would carry across; lesson learned!


Carlsberg don't run I.T departments, but if they did they'd probably be more fun.