The majority of domains and IP addresses on the internet have whatsocalled Whois information, which refers to internet asset owners information such as domain name, IP address, and AS(abbreviation for Autonomous System). This Whois information helps users estimate where the cyberattack was initiated and has been widely used in digital forensics. Criminal IP provides you the as_name filter that allows you to use AS name, one of the information included in Whois, to find corporate IP addresses.
How to Search for Institutional/Corporate IP Addresses
In order to search for corporate IP addresses using the as_name filter on Criminal IP Asset Search, you have to ensure that you enter the legal name of the corporation. For example, searching as_name: google will show you Google’s subsidiaries like Google Fiber Inc. Therefore, you have to search as_name: google llc if you are only looking for the parent company.

Search reuls of “as_name:google” on Criminal IP Asset Search. Subsidiaries like Google Fiber Inc can also be found.

Search result of “as_name:google llc” on Criminal IP Asset Search
If you go into the corresponding IP details, you can see that as_name filter can be used from the Whois section.

as_name filter can be found in the Whois section
Taking the same approach, you can use university or school as your keywords to find a list of school IP addresses.

Search result of “as_name:university” on Criminal IP Asset Search
The as_name filter allows you to find cloud servers as well. Since cloud servers often contain a string “cloud” in their names, using a keyword “cloud” will help you find different cloud server IP addresses all over the world, like Tencent and Oracle.
Using the keyword below, you can find the IP address of OVH SAS hosting company as well as of MOACK.
Additionally, the as_name filter can be used with other filters. For example, if you want to find corporate IP addresses in a particular country or city, simply use the country or city filter to narrow down your search result. The following is the search result using as_name: google llc city: seattle filter.

Search result of “as_name:google llc city:seattle” on Criminal IP Asset Search
데이터 출처 : Criminal IP
Leave a Reply