nanog mailing list archives

Re: Geoip lookup


From: Andreas Larsen <andreas.larsen () ip-only se>
Date: Fri, 24 May 2013 07:53:10 +0200

The whole idea of Geoip is flawed. IP dosen't reside in countries, they
are routable adresses that can reside everywhere, I guess soon on mars
even.


Med vänlig hälsning
Andreas Larsen
 
IP-Only Telecommunication AB| Postadress: 753 81 UPPSALA | Besöksadress:
S:t Persgatan 6, Uppsala |
Telefon: +46 (0)18 843 10 00 | Direkt: +46 (0)18 843 10 56
www.ip-only.se






Den 2013-05-24 02:54 skrev Rob Seastrom <rs () seastrom com>:


This may be just a case of getting what you pay for, but Maxmind marks
entire netblocks as proxies, puts 'em in the wrong country, and
ignores repeated efforts by the registrant of the address space to set
the record straight.  The problem comes when people actually do stuff
with the information, like block access to legitimate web sites
because the're in "proxy space" and therefore assumed to be bad guys
(believe it or not this practice is widespread by well-intentioned but
clueless folk).  Caveat utilitor.

-r

chip <chip.gwyn () gmail com> writes:

I've used the MaxMind Lite geo-ip database plus some perl modules and a
BGP
table to get something fairly close.  Anything in the BGP table that was
larger than a /20 I split into /20's.  For my use case, this was close
enough.  I then grabbed 30 or so IP's within the range and geo-ip mapped
them.  You can then apply some algebra and get a general idea of where
things are or are not.

Things I used:
http://search.cpan.org/~plonka/Net-Patricia-1.014/Patricia.pm - For
ip/prefix/lat-lon mapping
http://search.cpan.org/~borisz/Geo-IP-1.41/lib/Geo/IP.pm - For Geo-IP
lat/lon data
http://dev.maxmind.com/geoip/legacy/geolite - Maxmind's city database
http://data.caida.org/datasets/routing/routeviews-prefix2as/ - for BGP
prefix/mask + src ASN info

Good luck!

--chip






On Thu, May 23, 2013 at 3:47 PM, shawn wilson <ag4ve.us () gmail com>
wrote:

What's the best way to find the networks in a country? I was thinking
of
writing some perl with Net::Whois::ARIN or some such module and loop
through the block. But I think I'll have to be smarter than just a
simple
loop not to get blocked and I figure I'm not the first to want to do
this.

I've noticed some paid databases out there. They don't cost much but
are
they even worth what they charge? Ie, countryipblocks.net doesn't list
quite a few addresses from a country I've looked at blocking. Isn't
this
information free from the different *NICs anyway?

This is probably two questions: a program that smartly looks for
country's
blocks in a block and are GeoIP services worth anything?




-- 
Just my $.02, your mileage may vary,  batteries not included, etc....




Current thread: