[Intrusions] Locating IP Blocks Quickly

[Michael Dwyer]

Allen Mundt wrote:
> I hope that this question is not too basic, but does anyone 
 > know of a quick way to grab the first three octets of an IP
 > address and figure out where that is (like what country it
 > is in)?

Spam Assassin uses the Perl's IP::Country to quickly try to map an IP 
address to a country.  I think there are multiple methods it could use, 
depending on what level of speed and accuracy you need.

http://search.cpan.org/dist/IP-Country/

By the way, the first Google hit when searching for IP::Country was this 
commercial product, that looks pretty impressive:

http://www.ip2location.com/