nanog mailing list archives

Re: Geoip lookup


From: Rob Seastrom <rs () seastrom com>
Date: Thu, 23 May 2013 20:54:39 -0400


This may be just a case of getting what you pay for, but Maxmind marks
entire netblocks as proxies, puts 'em in the wrong country, and
ignores repeated efforts by the registrant of the address space to set
the record straight.  The problem comes when people actually do stuff
with the information, like block access to legitimate web sites
because the're in "proxy space" and therefore assumed to be bad guys
(believe it or not this practice is widespread by well-intentioned but
clueless folk).  Caveat utilitor.

-r

chip <chip.gwyn () gmail com> writes:

I've used the MaxMind Lite geo-ip database plus some perl modules and a BGP
table to get something fairly close.  Anything in the BGP table that was
larger than a /20 I split into /20's.  For my use case, this was close
enough.  I then grabbed 30 or so IP's within the range and geo-ip mapped
them.  You can then apply some algebra and get a general idea of where
things are or are not.

Things I used:
http://search.cpan.org/~plonka/Net-Patricia-1.014/Patricia.pm - For
ip/prefix/lat-lon mapping
http://search.cpan.org/~borisz/Geo-IP-1.41/lib/Geo/IP.pm - For Geo-IP
lat/lon data
http://dev.maxmind.com/geoip/legacy/geolite - Maxmind's city database
http://data.caida.org/datasets/routing/routeviews-prefix2as/ - for BGP
prefix/mask + src ASN info

Good luck!

--chip






On Thu, May 23, 2013 at 3:47 PM, shawn wilson <ag4ve.us () gmail com> wrote:

What's the best way to find the networks in a country? I was thinking of
writing some perl with Net::Whois::ARIN or some such module and loop
through the block. But I think I'll have to be smarter than just a simple
loop not to get blocked and I figure I'm not the first to want to do this.

I've noticed some paid databases out there. They don't cost much but are
they even worth what they charge? Ie, countryipblocks.net doesn't list
quite a few addresses from a country I've looked at blocking. Isn't this
information free from the different *NICs anyway?

This is probably two questions: a program that smartly looks for country's
blocks in a block and are GeoIP services worth anything?




-- 
Just my $.02, your mileage may vary,  batteries not included, etc....


Current thread: