Help with IP !!

[caliabris]

Hello
Could somebody tell me where may I take a list of IP of every country (I want to know from where the visitors in my site)

Just IP-contry

Thank

[ralnikov]

i'm afraid - nowhere
you could get IP distribution list from ARIN and other IP authorities and parse it or look at www.quova.com

[DaveAtIFG]

Thanks for stopping in at WebmasterWorld caliabris, welcome! You could identfy your visitors by country using their domain name fairly effectively. A list of the "country codes" you would need is at [norid.no...]

[Tapolyai]

If you are talking about a single instance, or few cases when you want to track down a specific visitor, a good trace route can help you.

For example here is a trace route from my machine to webmasterworld:

Trace www.webmasterworld.com (64.33.51.156) ...
1 207.69.222.201 120ms 120ms 130ms TTL: 0 (arc-2b.cle.mindspring.net ok)
2 207.69.222.193 141ms 120ms 111ms TTL: 0 (cisco-f0-0-0.cle.mindspring.net ok)
3 207.69.130.10 140ms 131ms 130ms TTL: 0 (cisco-h2-0-1.chi.mindspring.net ok)
4 207.122.231.149 150ms 131ms 130ms TTL: 0 (s4-0-0.chicago2-cr3.bbnplanet.net ok)
5 4.0.48.65 140ms 130ms 140ms TTL: 0 (f0-1-0.chicago1-br1.bbnplanet.net ok)
6 4.0.1.205 130ms 130ms 150ms TTL: 0 (p2-3.chicago1-nbr1.bbnplanet.net ok)
7 4.0.2.205 131ms 140ms 140ms TTL: 0 (p3-2.chcgil1-cr1.bbnplanet.net ok)
8 4.24.149.110 150ms 140ms 140ms TTL: 0 (p10-1-0.onlinemllc3.bbnplanet.net ok)
9 64.33.51.156 150ms 140ms 141ms TTL:244 (No rDNS)

This tells me that I had to go to Chicago for the connection.

Now here is a web site we know for sure is in Japan:
Trace www.yahoo.co.jp (211.14.13.65) ...
1 207.69.222.201 121ms 110ms 120ms TTL: 0 (arc-2b.cle.mindspring.net ok)
2 207.69.222.193 120ms 110ms 110ms TTL: 0 (cisco-f0-0-0.cle.mindspring.net ok)
3 207.69.130.10 140ms 160ms 130ms TTL: 0 (cisco-h2-0-1.chi.mindspring.net ok)
4 207.69.219.177 131ms 140ms 130ms TTL: 0 (juniper-ge-0-0-0.chi.mindspring.net ok)
5 208.51.41.81 160ms 130ms 131ms TTL: 0 (so-0-3-0.ar3.CHI1.gblx.net bogus rDNS: host not found [authoritative])
6 208.49.59.217 150ms 130ms 130ms TTL: 0 (pos1-3-622M.cr2.CHI1.gblx.net ok)
7 203.192.128.185 290ms 291ms 290ms TTL: 0 (so0-3-0-622M.cr2.NRT1.gblx.net ok)
8 203.192.128.242 290ms 280ms 290ms TTL: 0 (ge0-1-0-1000M.ar2.NRT5.gblx.net ok)
9 203.192.131.194 291ms 290ms 290ms TTL: 0 (No rDNS)
10 211.14.3.212 310ms 290ms 291ms TTL: 0 (GigabitEthernet1-0.cr1.tky3.globalcenter.ad.jp ok)
11 211.14.3.105 310ms 290ms 291ms TTL: 0 (hr5.tky3.globalcenter.ad.jp ok)
12 211.14.2.193 321ms 291ms 291ms TTL: 0 (yahoo-1.demarc.tky3.globalcenter.ad.jp ok)
13 211.14.12.249 290ms 281ms 290ms TTL: 0 (No rDNS)
14 211.14.13.65 290ms 291ms 290ms TTL: 42 (w11.yahoo.co.jp ok)

Notice that we can tell that it is in Japan because of the .jp, and in Tokyo because of the intermediary hops at "tky" in the GigabitEthernet1-0.cr1.tky3.globalcenter.ad.jp.

p.s.: You can also tell where I am coming from...

[keyplyr]

I use Analog [analog.cx] to process my raw logs. To this, I have added QuickDNS [analogx.com] which is extremely simple to set-up. It's all done on your local machine, creating a db of IP country origins for future checks, and can be turned on/off. It does add significant time when the DNS look-up is on, even though it's named "Quick" LOL.

[Dreamquick]

Does analog actually work out the country from the whois data or does it just grab the country-specific extension e.g. co.uk?

I had a feeling it was the latter.

- Tony

[keyplyr]

Well, it's actually QuickDNS that does it, but yeah, it actually searches a db of IPs. Whether it's the WhoIs or not, I don't know. If you go to the website (link provided in above post) it tells you :)