[184083] in North American Network Operators' Group
Re: GeoIP information
daemon@ATHENA.MIT.EDU (Fred Hollis)
Fri Sep 25 03:21:41 2015
X-Original-To: nanog@nanog.org
To: nanog@nanog.org
From: Fred Hollis <fred@web2objects.com>
Date: Fri, 25 Sep 2015 09:22:14 +0200
In-Reply-To: <CAP-guGU4M+dPoFpF1VLGqifdKm7TfqOF5imhH1YPpLcy1Zv+Hg@mail.gmail.com>
Errors-To: nanog-bounces@nanog.org
> They could purchase sales records from online retailers. Hey guys,
> give us the IP address, city, state and zip code for each sale; we'll
> pay you a nickle each. Then correlate that with BGP announcements that
> show the range of impacted addresses.
After looking more into the geo ip topic, I totally noticed, geo data
should NOT correlate with BGP data at all! There are a couple of geo ip
services that are doing it like you described, but IMO it's wrong.
See big telco's announcing /12's and having these IPs spread all over
the country.
On 25.09.2015 at 03:51 William Herrin wrote:
> On Thu, Sep 24, 2015 at 9:45 PM, Ray Van Dolson <rvandolson@esri.com> wrote:
>> I assumed it must be based off of WHOIS. The IP space I'm working with
>> is in the midwest (US). The address associated with it is from our
>> primary IP block out here in California, which it would have only been
>> able to gather from WHOIS. If it had gone off the last hop, presumably
>> it would have seen that as something a little closer to the real
>> location rather than *exactly* where our primary environment is. :)
>
> They could also do RDNS lookups and then see what rwhois says about the domain.
>
> They could purchase sales records from online retailers. Hey guys,
> give us the IP address, city, state and zip code for each sale; we'll
> pay you a nickle each. Then correlate that with BGP announcements that
> show the range of impacted addresses.
>
> They could convince folks to install web browser plugins which give
> the users rewards in exchange for ceding personal information. Or buy
> data from a company which does.
>
> -Bill
>
>
>
