Whois - not all IPs return their country code and organization

Graylog Add-ons
1

Hi All,

I have dashboard with the information about IP, country and organization which are trying to reach my resources.
I found that I don’t have country and organization fields for some public IP addresses.
It look like whois not working for all IPs and I’m not sure why.
Below are examples.

whois1
whois2

Can you please help me resolve my issue?
When I run whois on the machine where graylog is installed it works ok, even for 8.8.8.8.

Thanks!

2

Here is log:

ERROR: org.graylog.plugins.threatintel.whois.ip.parsers.WhoisParser - No known internet registry for WHOIS server redirect [whois]

What does it mean?

1 Like
3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.