Formation of the IP range of the organization

I want to get IP ranges for every college / campus where I can.

I found one site that seems to have a fairly reliable and complex file of this kind: http://www.bluetack.co.uk/config/edu.gz

I could not find information on how they generated this list.

I am interested in this, so I can determine the school of users when they come to my site. It would be best if I could create my own list and know how to do it, and not rely on (possibly outdated) from Bluetack.

I am sure that this can be done manually, school by school, using the whois database, but I'm interested in a software method that will immediately get everyone.

UPDATE I just came up with the idea that they can query the whois database for all * .edu entries. If there was some way to quickly request all .edu, this could be the solution here.

+6
source share
2 answers

This is the answer to your update, but not to your original question:

You can query the whois database using the whois command. You can use wildcards in your search:

 whois %.edu 

This will show you the first 100, because the search is limited to 100 entries. You can get around this limitation by doing smaller queries: aa%.edu , ab%.edu , ac%.edu and so on. This can be done with two cycles:

 for A in abcdefghijklmnopqrstu vwxyz ; do for B in abcdefghijklmnopqrstu vwxyz ; do whois $A$B%.edu | grep EDU$ done done 

But I don’t see how this can help solve your initial question: all you are looking for is all the delegations (PTR records) made by the LIR to the client who owns a particular domain. This information may be kept confidential.

+3
source

What about reverse visitor DNS lookups instead of matching with an IP block? That is, take the visitor's IP address, find his hostname, and if it ends in .edu, then your school. DNS is becoming your database.

+3
source

Source: https://habr.com/ru/post/887579/


All Articles