IP geolocation databases

Poese, Ingmar; Uhlig, Steve; Kâafar, Mohamed Ali; Donnet, Benoît; Gueye, Bamba

doi:10.1145/1971162.1971171

Cited by 294 publications

(145 citation statements)

References 8 publications

Supporting

Mentioning

143

Contrasting

Unclassified

Order By: Relevance

“…The problem is complicated when large organizations distribute IPs across various geographic regions, but the database still maps the IPs to the place where the organization is headquartered. For example, RapidShare Level 3 IPs were mapped to the U.K., while Global Crossing IPs were mapped to the U.S. Poese et al have found these commercial databases to be accurate at the country-level, but the bias in the results towards a few countries makes them unsuitable for general-purpose geolocation [27].…”

Section: Server Locationmentioning

confidence: 99%

Characterizing the file hosting ecosystem: A view from the edge

Mahanti

Williamson

Carlsson

et al. 2011

Performance Evaluation

View full text Add to dashboard Cite

We present a comprehensive, longitudinal characterization study of the file hosting ecosystem using HTTP traces collected from a large campus network over a one-year period. We performed detailed multi-level analysis of the usage behaviour, infrastructure properties, content characteristics, and user-perceived performance of the top five services in terms of traffic volume, namely RapidShare, Megaupload, zSHARE, MediaFire, and Hotfile. We carefully devised methods to identify user clickstreams in the HTTP traces, including the identification of free and premium user instances, as well as the identification of content that is split into multiple pieces and downloaded using multiple transactions. Throughout this characterization, we compare and contrast these services with each other as well as with peer-to-peer file sharing and other media sharing services.

show abstract

Section: Server Locationmentioning

confidence: 99%

Characterizing the file hosting ecosystem: A view from the edge

Mahanti

Williamson

Carlsson

et al. 2011

Performance Evaluation

View full text Add to dashboard Cite

show abstract

“…The study indicated that the location performance varied a lot-from 20 to 80% of the correct city estimations. The authors of this study used a 100 km range for the city-level definition, whereas other researchers used a 40 km range, such as [8,9]. The results within the country-level were around 80% and better.…”

Section: Related Workmentioning

confidence: 97%

“…The assigned locations are obtained through several sources that we describe in Section 4. A device location is estimated by searching the database for the corresponding block of IPs and if a match is found, the geographical position stored for the block is returned [8][9][10].…”

Section: Background On Device-independent Spatial Locationmentioning

confidence: 99%

See 1 more Smart Citation

Evaluation of Device-Independent Internet Spatial Location

Komosný

Pang

Mehić

et al. 2017

IJGI

View full text Add to dashboard Cite

Device-independent Internet spatial location is needed for many purposes, such as data personalisation and social behaviour analysis. Internet spatial databases provide such locations based the IP address of a device. The free to use databases are natively included into many UNIX and Linux operating systems. These systems are predominantly used for e-shops, social networks, and cloud data storage. Using a constructed ground truth dataset, we comprehensively evaluate these databases for null responses, returned country/region/city, and distance error. The created ground truth dataset differs from others by covering cities with both low and high populations and maintaining only devices that follow the rule of one IP address per ISP (Internet Service Provider) and per city. We define two new performance metrics that show the effect of city population and trustworthiness of the results. We also evaluate the databases against an alternative measurement-based approach. We study the reasons behind the results. The data evaluated comes from Europe. The results may be of use for engineers, developers and researchers that use the knowledge of geographical location for related data processing and analysis, such as marketing.

show abstract

“…Only a single look-up in a geolocation database is required, thus it is considered to be directly measurable. The values from geolocation database are also considered unreliable, with Poese stating that these geolocation databases are accurate at a country level but not at a city level [15]. An alternative method to find the location of IP addresses is to use latency measurements [16].…”

Section: Actor Location Quantificationmentioning

confidence: 99%

Human Perception of the Measurement of a Network Attack Taxonomy in Near Real-Time

Heerden

Malan

Mouton

et al. 2014

IFIP Advances in Information and Communication Technology

View full text Add to dashboard Cite

Abstract. This paper investigates how the measurement of a network attack taxonomy can be related to human perception. Network attacks do not have a time limitation, but the earlier its detected, the more damage can be prevented and the more preventative actions can be taken. This paper evaluate how elements of network attacks can be measured in near real-time(60 seconds). The taxonomy we use was developed by van Heerden et al (2012) with over 100 classes. These classes present the attack and defenders point of view. The degree to which each class can be quantified or measured is determined by investigating the accuracy of various assessment methods. We classify each class as either defined, high, low or not quantifiable. For example, it may not be possible to determine the instigator of an attack (Aggressor), but only that the attack has been launched by a Hacker (Actor). Some classes can only be quantified with a low confidence or not at all in a sort (near real-time) time. The IP address of an attack can easily be faked thus reducing the confidence in the information obtained from it, and thus determining the origin of an attack with a low confidence. This determination itself is subjective. All the evaluations of the classes in this paper is subjective, but due to the very basic grouping (High, Low or Not Quantifiable) a subjective value can be used. The complexity of the taxonomy can be significantly reduced if classes with only a high perceptive accuracy is used.

show abstract

IP geolocation databases

Cited by 294 publications

References 8 publications

Characterizing the file hosting ecosystem: A view from the edge

Characterizing the file hosting ecosystem: A view from the edge

Evaluation of Device-Independent Internet Spatial Location

Human Perception of the Measurement of a Network Attack Taxonomy in Near Real-Time

Contact Info

Product

Resources

About