Hello and welcome to the Friday, May 12, 2020, edition of the Sandsenet Storm Center's Stormcast. My name

is Johannes Ulrich and I'm recording from Jacksonville, Florida. I wrote a quick diary today

about how to geolocate addresses or really better some of the difficulties around geolocating

addresses. There is of course a simple and easy method. You just plug it in any of a number

of different websites that will spit out the geolocation for you of this address. But the problem is that many of the databases that

this geolocation relies on are not necessarily 100% up to date. And also, there are a couple of

notoriously difficult cases, like, for example, mobile phones, which are becoming a bigger and bigger issue, and

then also satellite connections, of course, that are difficult. But that's not the only

problem here. Also, ISPs tend to sometimes move IP addresses around from one geographic region

to another, depending on where they need

IP addresses, and the databases that are being used for geolocation aren't always up to date.

A couple other solutions that I point out here is a couple other ideas on confirming geolocation.

The one that I probably like the most is trace route,

because that kind of tells you what the upstream ISPs are and such,

how the data is being routed to the particular IP address,

and that can at least be a reasonable good confirmation

that the data that you got from the database, which is often based on

who is data, is somewhat accurate. If you have any ideas or any difficult to look up IP addresses,

well, let me know. And also, I used a little example here of an IP address that isn't really

terribly difficult to geolocate,

but I'm actually still not 100% sure about the country that that IP address is located in.

And while supply chain at hacks are just not going away,

...