Internet Registry Lookup

The Add‐on for Regional Internet Registry Consolidated Extended Statistics Tables (TA‐rirstats) creates and maintains a lookup containing all the network ranges documented by the five regional Internet registries (RIRs). Splunk queries can use this lookup to determine with what subnet a particular public IP address is associated. The lookup also includes the registry responsible for the subnet, the date the registration was changed, the status, the country the registration is in and a registration ID for the party to whom the registration was made.