[ARGUS] Destination Country

[Monah Baki]

Hi Carter,

It says IL, but so many other online tools say US, not sure which to trust.
Need to submit a report and don't want to give false info.


Thanks
Monah

On Tue, Mar 15, 2022 at 1:08 PM Carter Bullard <carter at qosient.com> wrote:

> Hey Mona,
> Its a pretty simple lookup, so fgrep for 141.226.224 in the
> delegated-ipv4-latest file to see what the data sez …
>
> Carter
>
> > On Mar 15, 2022, at 12:38 PM, Monah Baki <monahbaki at gmail.com> wrote:
> >
> > Hi everyone,
> >
> > I updated my ragetcountry.sh just now and sw the following:
> >
> >          StartTime  Proto            SrcAddr  Sport            DstAddr
> Dport  Trans                srcUdata
> dstUdata                 sCo dCo
> > 16:21:44.592508    tcp      192.168.2.168.57492
> 141.226.224.48.https       1 s[30]=...........b0..2.....R.oe'3...
>                                    ZZ  IL
> >
> >
> > Destination says Israel but
> > geoiplookup 141.226.224.48
> > GeoIP Country Edition: US, United States
> >
> >
> > Searching other online resources says the IP address is US.
> >
> >
> > Thanks
> > Monah
> > _______________________________________________
> > argus mailing list
> > argus at qosient.com
> > https://pairlist1.pair.net/mailman/listinfo/argus
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20220315/36724115/attachment.htm>