string parsing question

[pdata]

I'm trying to write a script to find out the Country of a particular IP - and I'm very rusty.

Here is the code I have so far:

$ipaddr = "209.0.0.5";
$data = exec("whois -h whois.arin.net \"+ $ipaddr\"",$ret);
foreach($ret as $line)
{
	echo "$line<br>";
}

Which displays:

[whois.arin.net]

OrgName: Level 3 Communications, Inc.
OrgID: LVLT
Address: 1025 Eldorado Blvd.
City: Broomfield
StateProv: CO
PostalCode: 80021
Country: US

NetRange: 209.0.0.0 - 209.0.255.255
CIDR: 209.0.0.0/16
NetName: LEVEL6-CIDR
NetHandle: NET-209-0-0-0-1
Parent: NET-209-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.LEVEL3.NET
NameServer: NS2.LEVEL3.NET
Comment:
RegDate: 2000-03-10
Updated: 2001-05-30

TechHandle: LC-ORG-ARIN
TechName: level Communications
TechPhone: [phone]
TechEmail: [e-mail]

OrgAbuseHandle: APL8-ARIN
OrgAbuseName: Abuse POC LVLT
OrgAbusePhone: [phone]
OrgAbuseEmail: [e-mail]

OrgTechHandle: TPL1-ARIN
OrgTechName: Tech POC LVLT
OrgTechPhone: [phone]
OrgTechEmail: [e-mail]

OrgTechHandle: ARINC4-ARIN
OrgTechName: ARIN Contact
OrgTechPhone: [phone]
OrgTechEmail: [e-mail]

ARIN WHOIS database, last updated 2003-12-29 19:15

Enter ? for additional hints on searching ARIN's WHOIS database.

I need to somehow get out and assign a variable to the country. In this case, the country is "US". For the likes of me I just can't figure out how.

[leatherback]

Hi,

Have a look at www.ip-to-country.com

J.

[pdata]

Thanks for the link.

I took a look at ip-to-country.csv and an example PHP script but it seems that for most IP's that I've tried it doesn't have an answer. I'm only able to determine the Country half the time or so. Has this been your experience?

Perhaps it would be a good idea to check against the ip-to-country.csv file first, and if nothing is returned do the lookup directly with arin?

Does anybody have the code to make the lookup to arin report the 2 digit Country code?

Thanks for all your help.

[pdata]

There was a problem with the function I used initially. I found one that works much better now.

Just 1 question, How often should I update my csv file from ip-to-country.com?

[leatherback]

The database basically just reflects how the IP numbers are distributed over the world. I !assume! there are not too often big changes. I do not know what you want to use it for. If it is for visitor statistics, you'd probably be OK doing it a few times epr year. If you use it for a billing system you'd have to get every update, I'd say..

J

[pdata]

I'm using the database in a fraud ranking program. Basically as customers sign-up I compare their reported country with their IP looked up country. If there isn't a match then there is a problem and we dont give them instant access. It is to be used alongside several other fraud checking methods but is a good indicator, obviously if they say they are in the US, but their IP is registered to the Netherlands something isn't right.

[kidgeek_dfw]

very old reply but in case anyone is wondering, how about this:

$ipaddr = "211.115.69.146";
$field = "OrgID";
$data = exec("whois -h whois.arin.net \"+ $ipaddr\"",$ret);
foreach($ret as $line)
{
$search = strstr($line,$field);
if($search != "") {
$searchx = explode(":",$search);
echo trim($searchx[1]);
}
}

[kidgeek_dfw]

also but instead of OrgID put Country

I'm also wondering if there is a better way to parse this...