Attribution, Registration, and GeoIP Data

Explanation of the Attribution, Registration, and GeopIP Data sections in the IP Ranges Detail View.
  • Attribution
    —Entries under the ownership link indicate the reason for attribution. This information comes from the Asset information. For more information, see How does Cortex Xpanse find my assets?
  • Registration
    —Cortex® Xpanse™ pulls registration information from public RIR (Regional Internet Registries) databases, including ARIN, RIPE, APNIC, LACNIC, and AFRINIC. Expander displays the registration information in the expanded asset view for an IP Range. Registry information in your Expander instance is updated approximately biweekly.
    As part of the registration data, Expander includes a network record and an organization record for the IP range. Cortex Xpanse pulls information from a combination of Registration Data Access Protocol (RDAP) and Whois data to collect the information:
    Network Record:
    • Name
    • Handle—A unique alphanumeric character sequence that represents an entry in the databases maintained by Network Information Centers
    • Start Address
    • End Address
    • Whois Server
    • Last Refreshed
    • Remarks
    Organization Record:
    • Name
    • Handle—A unique alphanumeric character sequence that represents an entry in the databases maintained by Network Information Centers
    • Roles
    • Email
    • Address
    • Last Changed
  • GeoIP/ Location Data
    —If Cortex Xpanse has seen the IP Address in the past 30 days, the city associated with the IP Address is listed. For more information on GeoIP, see GeoIP Collection.

Recommended For You