Geoip lookup

Andreas Larsen andreas.larsen at ip-only.se
Fri May 24 05:53:10 UTC 2013


The whole idea of Geoip is flawed. IP dosen't reside in countries, they
are routable adresses that can reside everywhere, I guess soon on mars
even.


Med vänlig hälsning
Andreas Larsen
 
IP-Only Telecommunication AB| Postadress: 753 81 UPPSALA | Besöksadress:
S:t Persgatan 6, Uppsala |
Telefon: +46 (0)18 843 10 00 | Direkt: +46 (0)18 843 10 56
www.ip-only.se






Den 2013-05-24 02:54 skrev Rob Seastrom <rs at seastrom.com>:

>
>This may be just a case of getting what you pay for, but Maxmind marks
>entire netblocks as proxies, puts 'em in the wrong country, and
>ignores repeated efforts by the registrant of the address space to set
>the record straight.  The problem comes when people actually do stuff
>with the information, like block access to legitimate web sites
>because the're in "proxy space" and therefore assumed to be bad guys
>(believe it or not this practice is widespread by well-intentioned but
>clueless folk).  Caveat utilitor.
>
>-r
>
>chip <chip.gwyn at gmail.com> writes:
>
>> I've used the MaxMind Lite geo-ip database plus some perl modules and a
>>BGP
>> table to get something fairly close.  Anything in the BGP table that was
>> larger than a /20 I split into /20's.  For my use case, this was close
>> enough.  I then grabbed 30 or so IP's within the range and geo-ip mapped
>> them.  You can then apply some algebra and get a general idea of where
>> things are or are not.
>>
>> Things I used:
>> http://search.cpan.org/~plonka/Net-Patricia-1.014/Patricia.pm - For
>> ip/prefix/lat-lon mapping
>> http://search.cpan.org/~borisz/Geo-IP-1.41/lib/Geo/IP.pm - For Geo-IP
>> lat/lon data
>> http://dev.maxmind.com/geoip/legacy/geolite - Maxmind's city database
>> http://data.caida.org/datasets/routing/routeviews-prefix2as/ - for BGP
>> prefix/mask + src ASN info
>>
>> Good luck!
>>
>> --chip
>>
>>
>>
>>
>>
>>
>> On Thu, May 23, 2013 at 3:47 PM, shawn wilson <ag4ve.us at gmail.com>
>>wrote:
>>
>>> What's the best way to find the networks in a country? I was thinking
>>>of
>>> writing some perl with Net::Whois::ARIN or some such module and loop
>>> through the block. But I think I'll have to be smarter than just a
>>>simple
>>> loop not to get blocked and I figure I'm not the first to want to do
>>>this.
>>>
>>> I've noticed some paid databases out there. They don't cost much but
>>>are
>>> they even worth what they charge? Ie, countryipblocks.net doesn't list
>>> quite a few addresses from a country I've looked at blocking. Isn't
>>>this
>>> information free from the different *NICs anyway?
>>>
>>> This is probably two questions: a program that smartly looks for
>>>country's
>>> blocks in a block and are GeoIP services worth anything?
>>>
>>
>>
>>
>> -- 
>> Just my $.02, your mileage may vary,  batteries not included, etc....
>




More information about the NANOG mailing list