Why is the logfile full of source IPs which are mapped to the wrong countries?
Options
All Replies
-
Thanks for the update.
Regarding the 87.120.222.229, check it up on malwareurl.com, scamalytics.com ,it is shown as being a commercial server proxying traffic from anywhere / elsewhere, and they show .bg as domain origin. Interesting.
0 -
I updated the GeoIP database to the latest today.
Recent entry is shown in the log like this:
This one shows it as being from .uk:
This one shows .nl:
https://www.shodan.io/host/45.142.193.172
And this one, .de:
https://whoisrequest.com/ip/45.142.193.172
I guess, it depends who you ask then as well it may show it differently :)
I am aware of proxying, VPNs etc.
Can you then specify the most precise tool to query where the IP is from?
0
Categories
- All Categories
- 442 Beta Program
- 2.9K Nebula
- 220 Nebula Ideas
- 128 Nebula Status and Incidents
- 6.5K Security
- 606 USG FLEX H Series
- 344 Security Ideas
- 1.7K Switch
- 84 Switch Ideas
- 1.4K Wireless
- 52 Wireless Ideas
- 7K Consumer Product
- 298 Service & License
- 482 News and Release
- 92 Security Advisories
- 31 Education Center
- 10 [Campaign] Zyxel Network Detective
- 4.8K FAQ
- 34 Documents
- 87 About Community
- 105 Security Highlight
Ally Member