The majority of domains and IP addresses on the internet have whatsocalled  Whois information, which refers to internet asset owners information such as domain name, IP address, and AS(abbreviation for Autonomous System). This Whois information helps users estimate where the cyberattack was initiated and has been widely used in digital forensics. Criminal IP provides you the as_name filter that allows you to use AS name, one of the information included in Whois, to find corporate IP addresses.

 

How to Search for Institutional/Corporate IP Addresses

In order to search for corporate IP addresses using the as_name filter on Criminal IP Asset Search, you have to ensure that you enter the legal name of the corporation. For example, searching as_name: google will show you Google’s subsidiaries like Google Fiber Inc. Therefore, you have to search as_name: google llc if you are only looking for the parent company.

as_name:google

Criminal IP Asset Search에서 as_name:google을 검색한 결과. 자회사인 Google Fiber Inc도 같이 나온다.

Search reuls of “as_name:google” on Criminal IP Asset Search. Subsidiaries like Google Fiber Inc can also be found.

as_name:google llc

Criminal IP Asset Search에서 as_name:google llc을 검색한 결과

Search result of “as_name:google llc” on Criminal IP Asset Search

If you go into the corresponding IP details, you can see that as_name filter can be used from the Whois section.

Whois 정보 섹션에서의 as_name 필터 검색 기능

as_name filter can be found in the Whois section

Taking the same approach, you can use university  or  school  as your keywords to find a list of school IP addresses.

as_name:university

as_name:school

Search result of "as_name:university" on Criminal IP Asset Search

Search result of “as_name:university” on Criminal IP Asset Search

The as_name filter allows you to find cloud servers as well. Since cloud servers often contain a string “cloud” in their names, using a keyword “cloud” will help you find different cloud server IP addresses all over the world, like Tencent and Oracle.

as_name:cloud

Using the keyword below, you can find the IP address of OVH SAS hosting company as well as of MOACK.

as_name:ovh

as_name:moack

Additionally, the as_name filter can be used with other filters. For example, if you want to find corporate IP addresses in a particular country or city, simply use the country or city filter to narrow down your search result. The following is the search result using as_name: google llc city: seattle filter.

as_name: google llc city: seattle

Criminal IP Asset Search에서 as_name: google llc city: seattle를 검색한 결과

Search result of “as_name:google llc city:seattle” on Criminal IP Asset Search


데이터 출처 : Criminal IP