The info, at least for my home ISP, is incorrect.
The trust score docks 5 points because I don't have a reverse DNS record on the IP, but I do :-P And the reverse DNS box at the top even correcly reports my rDNS
The site says that the trust score was improved because the allocation for my IP is >10 years old, however my ISP didn't exist 10 years ago. The ASN for my ISP is only 5 years old (they brought some IP blocks because you know IPv4 address exhaustion!)
And very very little data is returned for my ipv6 /48
These databases don't seem to be too accurate or in agreement. I've tried to use them To block Russia, china, and a few others which has been a great help in server load but when I do a random check on someone scanning me I still get addresses in Russia and china. There's also the issue of countries leasing or selling blocks of addresses so I'll look at an address that's supposed to be in Africa but the traceroute says Singapore, for example. It's just a mess.
US is pretty inflated because of military and other misc government subnets, would be cool if there was a way to exclude government owned subnets. Excluding cloudflare would also be nice since they force everyone to announce via their proprietary systems rather than the standard BGP protocol and then announcing it under their ASN.
It's also inflated by large companies with dozens of class A networks, but who actually need a total of maybe just a few class C subnets. I once worked for a company with tens of thousands of computers that were using public IP addresses, but they were all completely firewalled, and they used proxies for limited Internet access.
Which company has dozens of class A networks? The only one I'm aware of with two is HP who had 15/8 and 16/8, but I think they returned at least a significant amount of that.
BBN/successors may have held multiple class As at times, but being large ISPs probably used a lot of the space? Various clouds have a lot of space, but afaik, not in the form of whole class As.
Looks like IBM probably had multiple class As through acquisition, but I don't think they still hold them either?
8 comments:
Hey, I have one of those.
The info, at least for my home ISP, is incorrect. The trust score docks 5 points because I don't have a reverse DNS record on the IP, but I do :-P And the reverse DNS box at the top even correcly reports my rDNS
The site says that the trust score was improved because the allocation for my IP is >10 years old, however my ISP didn't exist 10 years ago. The ASN for my ISP is only 5 years old (they brought some IP blocks because you know IPv4 address exhaustion!)
And very very little data is returned for my ipv6 /48
These databases don't seem to be too accurate or in agreement. I've tried to use them To block Russia, china, and a few others which has been a great help in server load but when I do a random check on someone scanning me I still get addresses in Russia and china. There's also the issue of countries leasing or selling blocks of addresses so I'll look at an address that's supposed to be in Africa but the traceroute says Singapore, for example. It's just a mess.
US is pretty inflated because of military and other misc government subnets, would be cool if there was a way to exclude government owned subnets. Excluding cloudflare would also be nice since they force everyone to announce via their proprietary systems rather than the standard BGP protocol and then announcing it under their ASN.
It's also inflated by large companies with dozens of class A networks, but who actually need a total of maybe just a few class C subnets. I once worked for a company with tens of thousands of computers that were using public IP addresses, but they were all completely firewalled, and they used proxies for limited Internet access.
Which company has dozens of class A networks? The only one I'm aware of with two is HP who had 15/8 and 16/8, but I think they returned at least a significant amount of that.
BBN/successors may have held multiple class As at times, but being large ISPs probably used a lot of the space? Various clouds have a lot of space, but afaik, not in the form of whole class As.
Looks like IBM probably had multiple class As through acquisition, but I don't think they still hold them either?
Do you have any examples of large companies that have multiple /8s but can get away with a /21?
IP allocations are inaccurate due to all the VPNs, (CG)NATs and proxies spoofing everything now, the whole internet is tangled up like weeds.