Printable View
Hey all,
I know that filtering users by IP is not the most effective way to do it, but it's how the boss wants it done.... I'm wondering if anybody knows of a resource or website that lists IP ranges based on country? Most specifically, I'm looking for the IP addresses in: Tanzania, Democratic Republique de Congo, Burundi, Kenya and Zambia.
Thanks so much!
- Luke
You can query whois for each IP range to determine what country it belongs to. There's no guarantee however, that it's actually used in the country that it's registered in, so the results might be inaccurate.
I also have no idea which NIC African countries' IP addresses are typically assigned from - there are three NICS, ARIN (The American Registrar of Internet Numbers or something), RIPE (The European Registry of IP numbers) and APNIC (Asia Pacfic Network Information Centre)
However it isn't clear from their geographical distribution which one convers Africa, it may use IP addresses from all three :)
You could probably create a script which queried every netblock in the world (this would take a while) in the relevant NICs, then organise them by country.
Someone may have already done this. So look first.
There used to be a site which listed IP numbers and who owned them, but I think it went down for being too hacker-ish.
In any case, as I mentioned originally, just because an IP address is owned by an organisation in one country, doesn't mean it isn't used in another.
Slarty
Thanks so much slarty,Quote:
Originally posted here by slarty
You can query whois for each IP range to determine what country it belongs to. There's no guarantee however, that it's actually used in the country that it's registered in, so the results might be inaccurate.
I know that this method won't be anywhere near perfect, so I'm not even pretending to get my hopes up. LOL
All I really want to know is which country owns which IP ranges. It'll get the bulk of the right people to the right pages... I hope.
I do have this little bit of information (it's about all I have at present):
Kenya - RIPE
Burundi - ARIN
DRC - ARIN
Tanzania - ARIN
Zambia - ARIM
I'll start querying a few IP ranges and see what info I can gather -- that's for that suggestion.
- Luke
Internet IP addys distribution is a big big mess.
It never had been geographically distributed. Coze IP ranges had been given to companies or gov or whatever in a FIFO style.
That's the reason why if you look at the routing table of a provider router connected to the www you'll see a damn huge list of ip addys (the file is about 40Mb, just for listing addys in string format..... wooo).
In an ideal world, and I sincerely hope with IPv6, ip ranges will be betterly distributed, in a manner where address aggregation would be achievable.
One option you could try, is to look up the country's major internet providers in a directory, do a whois on them to discover their IP ranges, and tag those ranges as belonging to that country.
It's not a catch-all however. But I guess that given that there will be relatively few ISPs within an African country, it might have a fairly high success rate.
There's no guarantee that within a given African country, all the IP addresses are even assigned from the same registrar.
Hey even here in the UK (obviously technically in the RIPE area) I have heard of companies having ARIN IP addresses.
Also, some people in Africa may dial international ISPs, thus appearing to come from a totally different country.
Slarty
Hi
Shortly after September the 11th there was a posting somewhere i cant recall exactly where, it may have even been on here (AntiOnline) to a link which gave a complete listing of IP address's around the globe on a country by country basis and then broke these down into which ISP or Organisation had what IPs and it also had a zip file of the complete global listing.
I was recently trying to find the link for myself but as yet havnt rediscovered it, this maybe of use to you if you can track it down or if some kind soul on here can recall the location of the link they would post it. I did have the file but for the life of me i cannot find it.
Please can someone help.
I have just managed to find the URL http://www.idefense.com/Intell/CI022702.html
I hope this is what you was looking for or that it may help.
Take a look at this: http://www.ckdhr.com/perl/loc2maps
Some DNS use loc records, especially those for major routers.
So by finding the routers for a country you wish to block -
Find the ISPs & traceroute them to find common routers & then check out their LOC records
- you could write a script that checks any inbound/outbound ip traceroute to see if it goes through any of the routers in question and then drop that IP into a hosts deny.
HTH
Steve
i have a listing for Tanzania but nothing on the others...this might save you some work
193.220.80.0 - 193.220.80.255 (INTAFRICA) Internet Africa Ltd; Dar es Salaam; Tanzania; TZ
193.220.81.0 - 193.220.81.255 (DATELNET-COM) DATEL TANZANIA LTD; DAR ES SALAAM; TZ
193.220.82.0 - 193.220.83.191 (CATS-NET) Internet Service Provider in Dar es Salaam, Tanzania; TZ
193.220.84.0 - 193.220.84.255 (RAHA) Star Telecom Ltd; Dar Es Salaam; Tanzania; TZ
193.220.85.0 - 193.220.85.255 (AFRICAONLINE-TZ) Africa Online (Tanzania); Dar Es Salaam; TZ
193.220.86.0 - 193.220.86.127 (JRELECT-BLK1-TZ) JR Electronics Ltd; Arusha and Kilimanjaro, Tanzania; TZ
193.220.88.0 - 193.220.88.255 (DATELNET-COM-MWANZA) Mwanza POP; Mwanza, Tanzania; TZ
193.220.90.0 - 193.220.90.127 (CYBERNET-CO-TZ) Arusha POP; Arusha; TZ
193.220.91.0 - 193.220.91.255 (HABARI-CO-TZ) Arusha Node Marie; Arusha; TZ
194.51.134.0 - 194.51.134.255 (FR-FCR) FCR - TANZANIE; FRANCE CABLE ET RADIO; TZ
195.229.11.0 - 195.229.11.255 (ZANTELNET-EMIRNET) Network provider to ISPs located at Zanzibar.; TZ
195.229.5.0 - 195.229.5.127 (ZANZINET-DOM) Zanzibar's Internet Service Provider; Mazrui Building,Zanzibar,Tanzania; TZ
195.229.5.128 - 195.229.5.255 (ZANTELNET-EMIRNET) Network provider to ISPs located at Zanzibar; P.O.Box 3459, Zanzibar, Tanzania; TZ
195.229.8.0 - 195.229.8.127 (ZANTELNET-EMIRNET) Network provider to ISPs located at Zanzibar; P.O.Box 3459, Zanzibar, Tanzania; TZ
195.229.8.128 - 195.229.8.255 (ZANTELNET-EMIRNET) Network provider to ISPs located at Zanzibar.; TZ
195.6.54.0 - 195.6.54.255 (FR-FCR) FCR - TANZANIE; FRANCE CABLE ET RADIO; Sodetel, Lebanon; TZ
That's very helpful! Thank you! :)Quote:
Originally posted here by Tedob1
i have a listing for Tanzania but nothing on the others...this might save you some work
193.220.80.0 - 193.220.80.255 (INTAFRICA) Internet Africa Ltd; Dar es Salaam; Tanzania; TZ
193.220.81.0 - 193.220.81.255 (DATELNET-COM) DATEL TANZANIA LTD; DAR ES SALAAM; TZ
193.220.82.0 - 193.220.83.191 (CATS-NET) Internet Service Provider in Dar es Salaam, Tanzania; TZ
193.220.84.0 - 193.220.84.255 (RAHA) Star Telecom Ltd; Dar Es Salaam; Tanzania; TZ
193.220.85.0 - 193.220.85.255 (AFRICAONLINE-TZ) Africa Online (Tanzania); Dar Es Salaam; TZ
193.220.86.0 - 193.220.86.127 (JRELECT-BLK1-TZ) JR Electronics Ltd; Arusha and Kilimanjaro, Tanzania; TZ
193.220.88.0 - 193.220.88.255 (DATELNET-COM-MWANZA) Mwanza POP; Mwanza, Tanzania; TZ
193.220.90.0 - 193.220.90.127 (CYBERNET-CO-TZ) Arusha POP; Arusha; TZ
193.220.91.0 - 193.220.91.255 (HABARI-CO-TZ) Arusha Node Marie; Arusha; TZ
194.51.134.0 - 194.51.134.255 (FR-FCR) FCR - TANZANIE; FRANCE CABLE ET RADIO; TZ
195.229.11.0 - 195.229.11.255 (ZANTELNET-EMIRNET) Network provider to ISPs located at Zanzibar.; TZ
195.229.5.0 - 195.229.5.127 (ZANZINET-DOM) Zanzibar's Internet Service Provider; Mazrui Building,Zanzibar,Tanzania; TZ
195.229.5.128 - 195.229.5.255 (ZANTELNET-EMIRNET) Network provider to ISPs located at Zanzibar; P.O.Box 3459, Zanzibar, Tanzania; TZ
195.229.8.0 - 195.229.8.127 (ZANTELNET-EMIRNET) Network provider to ISPs located at Zanzibar; P.O.Box 3459, Zanzibar, Tanzania; TZ
195.229.8.128 - 195.229.8.255 (ZANTELNET-EMIRNET) Network provider to ISPs located at Zanzibar.; TZ
195.6.54.0 - 195.6.54.255 (FR-FCR) FCR - TANZANIE; FRANCE CABLE ET RADIO; Sodetel, Lebanon; TZ
Just as an update: I found this website and it appears to be quite complete: http://rv.web-heaven.com/
I'm giving this script a shot and hopefully it'll do it for me... unfortunately deadlines are thing of the past, so Tedob1's post was extreemly helpful as the free dbase there needs to be updated.... I have the $45 dbase on order, but no email confirming it yet..... sure hope that credit card clears! lol
Thanks again for all the suggestions... hopefully the above link will be able to help someone else out as well. :)
- Luke
Here's another similar script/free database that might help you