[Dshield] Database of Known Malicious IP Address/IP Networks

Johannes Ullrich jullrich at sans.org
Thu Aug 8 10:54:53 GMT 2002

> I would find the IP-->country database really useful.  If you could dump 
> it to an ASCII file for download, I would appreciate it.

try http://feeds.dshield.org/countries.txt

the columns are:
startip, endip, country, region.

The ips are in long integer format...

some of the oddities:
country EU: IP ranges used in more than one european country.
country XX: unassigned.

the countries are regular two letter codes. The region I am
using are:
EU Europe
AF Africa
AS Asia
AU Australia/NZ
NA North America
SA South America

jullrich at sans.org             Collaborative Intrusion Detection
                                    join http://www.dshield.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://www.dshield.org/pipermail/list/attachments/20020808/f0a566da/attachment.bin

More information about the list mailing list