Sunday, April 30, 2006

International IP Database

I've been looking for this for quite some time and telling investors that we need it. Finally I found it...

International IP Database

Now you might think, hey, I can already get this information from DNSSTuff.com or any of the Internet databases out there. Why do I need this?

Here's why: Because organizations like RIPE span multiple countries and the IPs are not kept together in blocks for each country. You could have an Australian net range of DNS records butted up against the infamous Chinese hacker net ranges.

Well, it's pretty well established that there are loads of hackers coming out of Taiwan, Korea, China, Russia and a few in Japan. So let's say you have no reason to do business with Asia and you want to just block out that whole set of IPs to prevent any unwanted attacks from those countries but still allow you to do business with other coutries whose DNS is supported by the RIPE DNS database. How are you going to do that? Impossible!

Until now. If this Maxmind.com database really works - I say if because I have not verified that it is accurate, or that they are a legitimate, non-hacker organization and that their information has not been hacked - then you should be able to use their database to update your firewall and simply block out these problem countries laden with hackers.

As noted in other reports China is actually leveraging hackers in their country as an espiange and internet warfare force. It may be best to just completely block them out if you don't have a need to do business with them, or have separate servers for Asia and other parts of the world. This is an extreme suggestion, but this is the world we live in and hackers abound in certain countries.

True hackers could re-route through other countries but it would make it one step harder for them and hopefully these other countries would be more hacker UNfriendly.