Does anyone understand, why Hamachi is using IP addresses belonging to the UK Ministry of Defence and to the U.S. Securities & Exchange Comission (SEC)?
% whois 126.96.36.199
% IANA WHOIS server % for more information on IANA, visit http://www.iana.org % This query returned 1 object refer: whois.ripe.net inetnum: 188.8.131.52 - 184.108.40.206 organisation: Administered by RIPE NCC status: LEGACY whois: whois.ripe.net changed: 1995-01 source: IANA
org-name: UK Ministry of Defence
% whois 2620::0 % IANA WHOIS server % for more information on IANA, visit http://www.iana.org % This query returned 1 object inet6num: 2620:0:0:0:0:0:0:0/23 organisation: ARIN status: ALLOCATED whois: whois.arin.net changed: 2006-09-12 source: IANA
OrgName: U.S. Securities & Exchange Commission OrgId: USEC Address: 100 F Street Address: Mail Stop 2606 City: Washington StateProv: DC PostalCode: 20549-0001 Country: US
@AshC I don't see how my local setup has anything to do with the IP address ranges used by Hamachi, but here you go: I downloaded the LogMeIn Hamachi Client from https://www.vpn.net/ . After installing I clicked on "Create a new network" and provided a network name and a password. My Hamachi client is now showing a IPv4 (25.XXX.XXX.XXX) and a IPv6 address (2620:9b::XXXX:XXXX).
As you might know the IP address space is managed by IANA ( https://www.iana.org/numbers ) and network providers get subnets assigned they can use. So I was very puzzled to find out, that the IP addresses used by Hamachi not only do not belong to them, but as I wrote before, to governmental organizations, namely the UK Ministry of Defence and the US SEC.
You can do a whois-query yourself, to find about the address space your IP is part of. The IANA whois service ( https://www.iana.org/whois ) tells us, which regional organization is responsible for the given address, it is RIPE for the IPv4 and ARIN for the IPv6 range. These have whois-tools on their site, you can try out yourself: https://apps.db.ripe.net/db-web-ui/query?bflag=false&dflag=false&rflag=true&searchtext=220.127.116.11&sour... and https://whois.arin.net/rest/net/NET6-2620-2/pft?s=2620%3A%3A
@goligo I've confirmed we are not routing through the MOD ourselves, but used a similar IP address in the same range. This is in part to stop users from attempting to reach the MOD due to the inherent IP conflict.