[184075] in North American Network Operators' Group
Re: GeoIP information
daemon@ATHENA.MIT.EDU (Ray Van Dolson)
Thu Sep 24 21:48:00 2015
X-Original-To: nanog@nanog.org
Date: Thu, 24 Sep 2015 18:45:40 -0700
From: Ray Van Dolson <rvandolson@esri.com>
To: William Herrin <bill@herrin.us>
In-Reply-To: <CAP-guGX7BpPTuuRsX+P0dSeZjnXRH8o6TYSo=nhPnGvKdBXezA@mail.gmail.com>
Cc: "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Thu, Sep 24, 2015 at 09:41:42PM -0400, William Herrin wrote:
> On Thu, Sep 24, 2015 at 9:33 PM, Ian Clark <ian.clark@dreamhost.com> wrote:
> > Where do GeoIP companies get their data, if not whois records?
>
> I would assume that they query whois for one of their sources. They
> don't have to enter any contract with ARIN to do so but they also
> can't promptly collect any sizable portion database that way. That
> isn't the same as signing up for bulk whois access
> (https://www.arin.net/resources/request/bulkwhois.html).
>
> I imagine they also do traceroutes to identify the last known location
> in the route.
>
> Regards,
> Bill Herrin
I assumed it must be based off of WHOIS. The IP space I'm working with
is in the midwest (US). The address associated with it is from our
primary IP block out here in California, which it would have only been
able to gather from WHOIS. If it had gone off the last hop, presumably
it would have seen that as something a little closer to the real
location rather than *exactly* where our primary environment is. :)
Ray
