swinog

swinog@lists.swinog.ch

8 participants
2951 discussions

Re: MaxMind location determination (was: Contact: geoiplookup.net)
by Jeroen Massar 20 Oct '22

20 Oct '22

Hi, If you configure it (remarks and/or geofeeds: attribute in whois), they will come. I see a bit below a thousand IPs fetching my geofeed data over the last few days Quick grep (with some filtering due to versions etc) of UAs; see below; quite some normal web crawlers, but also dedicated it seems. Note that like anything, geofeed is just an indicator, somebody might use or not use it. Many build precise geoloc based of physical orders and/or GPS in mobile phones, thus depending on users logging in to certain websites or ordering things and having GPS enabled for that site... Greets, Jeroen -- "APIs-Google (+https://developers.google.com/webmasters/APIs-Google.html)" "CheckMarkNetwork/1.0 (+http://www.checkmarknetwork.com/spider.html)" "Crawlbot/Nutch-1.19-SNAPSHOT" "Go-http-client/2.0" "IonCrawl (https://www.ionos.de/terms-gtc/faq-crawler-en/)" "Ipregistry/2.0.0 (geofeeds; +https://ipregistry.co)" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; +http://www.komodia.com/newwiki/index.php/URL_server_crawler) KomodiaBot/1.0" "Mozilla/5.0 (compatible; Adsbot/3.1; +https://seostar.co/robot/)" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" "Mozilla/5.0 (compatible; Barkrowler/0.9; +https://babbar.tech/crawler)" "Mozilla/5.0 (compatible; Crawlson/1.0; +https://www.crawlson.com/search?q=site:as57777.net)" "Mozilla/5.0 (compatible; DataForSeoBot/1.0; +https://dataforseo.com/dataforseo-bot)" "Mozilla/5.0 (compatible; Dataprovider.com)" "Mozilla/5.0 (compatible; DotBot/1.1; http://www.opensiteexplorer.org/dotbot, help(a)moz.com)" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help(a)moz.com)" "Mozilla/5.0 (compatible; EntferBot/0.1; +https://entfer.com; +a_new_independent_search_engine;)" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "Mozilla/5.0 (compatible; Linespider/1.1; +https://lin.ee/4dwXkTH)" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" "Mozilla/5.0 (compatible; MegaIndex.ru/2.0; +http://megaindex.com/crawler)" "Mozilla/5.0 (compatible; SeznamBot/4.0-RC1; +http://napoveda.seznam.cz/seznambot-intro/)" "Mozilla/5.0 (compatible; TorusBot/1.0; +https://torus.company/bot.html)" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)" "Mozilla/5.0 (compatible; Yeti/1.1; +http://naver.me/spd)" "Mozilla/5.0 (compatible; ips-agent)" "Python/3.9 aiohttp/3.8.1" "Slackbot-LinkExpanding 1.0 (+https://api.slack.com/robots)" "Wget/<various>" "axios/0.27.2" "clark-crawler2/Nutch-1.19-SNAPSHOT" "colly - https://github.com/gocolly/colly/v2" "curl/<various>" "db-ip "libwww-perl/6.42" "ltx71 - (http://ltx71.com/)" "netEstate NE Crawler (+http://www.website-datenbank.de/)" "python-requests/2.22.0" "serpstatbot/2.1 (advanced backlink tracking bot; https://serpstatbot.com/; abuse(a)serpstatbot.com)" "x28-job-bot; +http://x28.ch/bot.html" > On 17 Oct 2022, at 11:39, Fredy Kuenzler <kuenzler(a)init7.net> wrote: > > I think that the RFC8805 approach is the way to go for the industry, however I wonder which ISP is already using it in real life today. I couldn‘t find much about it besides the slides of RIPE81. > > We see GeoIP complaints of end customers on a regular basis and it would be nice if RFC8805 could solve the problem. > > https://ripe81.ripe.net/presentations/27-RIPE81_geofeeds_discovery.pdf > 27-RIPE81_geofeeds_discovery > PDF-Dokument · 2.3 MB > > > -- > Fredy Künzler > > Init7 (Switzerland) Ltd. > Technoparkstrasse 5 > CH-8406 Winterthur > https://www.init7.net/ > > <(null).(null)>_______________________________________________ > swinog mailing list -- swinog(a)lists.swinog.ch > To unsubscribe send an email to swinog-leave(a)lists.swinog.ch

2 1

Contact: geoiplookup.net
by Benoit Panizzon 20 Oct '22

20 Oct '22

Hi Swinogers Does anyone know who operates geoiplookup.net and how to contact them? They repeatedly put parts of our IP ranges into Germany creating vast service disruptions for our affected customers by Swiss service providers that use their API for GeoBlocking. Mit freundlichen Grüssen -Benoît Panizzon- -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________

8 10

switch started blocking whois queries?
by Benoit Panizzon 17 Oct '22

17 Oct '22

Hi Gang From three different IP Addresses I get: Requests of this client are not permitted. Please use https://www.nic.ch/whois/ for queries. Mit freundlichen Grüssen -Benoît Panizzon- -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________

3 4

DNS help: named 'end of file resolving' a hostname.
by Benoît Panizzon 17 Oct '22

17 Oct '22

Hi Team Maybe some of you has already come over that issue and know how to fix. Bind 9.18.4 fails to resolve the A record of: fd19g0409.drive.pro.io Bind 9.11.36 works. Both versions have DNSSEC Validation enabled and connected to a network not restricting EDNS. Bind Logs: named[3156696]: end of file resolving '_.drive.pro.io/A/IN': 80.74.143.169#53 Dr. Google does not spit out any useful answer to this error. Analyzing the traffic with Wireshark, shows the authoritative server for this domain is answering and nothing jumps to my eye which could be wrong with the answer I see in the trace. I guess _.drive.pro.io is a dummy query performed to get OPTIONS. So my usual attempt is to disable all options that might cause issues: $ dig +noedns +nocookie +nodnssec +noednsnegotiation A fd19g0409.drive.pro.io @{BIND-9.18.4-NS} Error persists. Any help appreciated in a pointer to the possible cause. -- Mit freundlichen Grüssen -Benoît Panizzon- @ HomeOffice und normal erreichbar -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________

4 4

Looking for /22 PA Space
by Matias Meier 14 Oct '22

14 Oct '22

Hello colleagues If anyone of you would like to sell a clean /22 IPv4 PA network, please reach out to me off list with your asking price. Thank you and have a nice day and soon, a nice weekend. Greetings Matias

1 0

DEC-IX buy SwissIX?
by peerwithme 13 Oct '22

13 Oct '22

Today news is DE-CIX buy of SwissIX Why that is not consulted to the members? Why that is plan? Job of Rémy? Port price raise? garantie no price raise? DE-CIX is €€€€€€€€€ for small swiss network! DE-CIX = profit SwissIX = verein how is possible?

3 2

ip-plus.net Nameservers dead?
by Matthias Leisi 06 Oct '22

06 Oct '22

It looks like ip-plus.net nameservers are dead. ns1 times out, ns2 has no IP. I expect some fallout… — Matthias

1 0

Contact request
by yoshi 30 Sep '22

30 Sep '22

Hello everyone, is anyone from Up-Network (AS203790) there ? Have tried to contact them via noc(a)up-network.ch but no answer yet. Thanks. Mathias

1 0

Switches (out of support) to give away
by Mueller Urs SBB CFF FFS 28 Sep '22

28 Sep '22

Hello folks We do have two old but working Cisco Switches go give away - Modell: C3560x-24P-S - two power supplies each - out of support - including power cable switzerland - one switch with C3KX-NM-10G (4-Port 10 GbE SFP) - one switch with C3KX-SM-10G (2-Port 10 GbE SFP with MACSec HW acceleration) - one spare C3KX-SM-10G Hardware must be picked up in Ostermundigen. First comes, first serves, but non commercial/public domain/education preferred Urs Müller SBB AG Cyber Security Cyber Defense Center Poststrasse 6, 3072 Ostermundigen Mobil +41 79 433 21 67 urs.bf.mueller(a)sbb.ch / www.sbb.ch

2 1

Invitation Swiss Web Security Day 27. October Casino Bern
by Michael Hausding 28 Sep '22

28 Sep '22

Dear Swinog The Swiss Web Security Day is a one-day event organized by SWITCH, the Swiss Internet Security Alliance SISA and the Swiss ICT Industry Association Swico. This event will cover current security issues for Swiss registrars and webhosters. There will be talks about current technical, legal and regulatory issues and also plenty of time to network with your colleagues. You can find the agenda and registration here: https://swsd2022.events.switch.ch/ Join us online or in person in Bern, participation of free Hope to see many of you in Bern! Best regards Michael ------------------------------------ Michael Hausding, Competence Lead DNS & Domain Abuse SWITCH-CERT Werdstrasse 2, P.O. Box, 8021 Zurich, Switzerland phone +41 44 268 15 77, incident phone +41 44 268 15 40 michael.hausding(a)switch.ch http://securityblog.switch.ch

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog