by Thomas Neirnyck This article was originally published on The Elastic Blog on Jan 20, 2021.
This tutorial shows how you can leverage GeoIP data using tools developed by Elastic. Elastic builds software to make data usable in real time and at scale for search, logging, security, and analytics use cases. Elastic’s tools make it easier for operations teams to keep applications running, or give security professionals a one-stop-shop for spotting and neutralizing digital threats. Learn more at elastic.co.
In December MaxMind released the new GeoLite2 web services, an IP geolocation API available free of charge.
IP geolocation services provide information about the geographic location of an IP address. MaxMind offers such free web services, GeoLite2 City and GeoLite2 Country, which are comparable to, but less accurate than, MaxMind’s paid GeoIP2 Precision City and GeoIP2 Precision Country web services. GeoLite2 is fully compatible with GeoIP2, using the same API and integration method, making it easy to switch between the free and paid services as your needs change. You can compare accuracy of the GeoLite2 and GeoIP2 web services by selecting a country on the GeoIP2 City Accuracy page.
In this blog post, we are going to review how to build a simple web page in PHP that uses GeoLite2 City. We will learn how to easily upgrade to the paid GeoIP2 Precision City web service, for greater accuracy and unlimited queries (GeoLite2 web service users are limited to 1,000 queries per day).
MaxMind DB (or MMDB) files facilitate the storage and retrieval of data in connection with IP addresses and IP address ranges, making queries for such data very fast and easy to perform. While MMDB files are usable on a variety of platforms and in a number of different programming languages, this article will focus on building MMDB files using the Go programming language.
The MaxMind module for HAProxy Enterprise enables you to perform geolocation lookups from a single point at the edge of your network allowing you to offload this work from your backend servers. This native module integration lets you analyze real-time traffic and assign GeoIP properties to requests as they pass through your HAProxy Enterprise load balancer in order to make decisions on this data. You can package the values up as HTTP request headers before the request is proxied. The integration also allows GeoIP2 databases to be updated quickly and seamlessly without the need for scripts across your application fleet.
HAProxy Enterprise combines HAProxy, the world’s fastest and most widely used, open-source load balancer, with enterprise-class features, services, and premium support. By placing it at the edge of your network, you instantly gain access to improved observability over the load placed upon your servers, whether there is any suspicious client behavior, and how quickly your services are responding to requests.
It always starts with an innocent observation. “We get a lot of traffic from Boston,” your boss remarks. You naturally throw out a guess or two and discuss why that might be. Until your boss drops the bomb —
“Can you dig into that?”
Darn it. You walked right into that one.
Now you’re in a predicament. You know Google Analytics has traffic by geographic location, but that’s not gonna cut it. If you want to report on those retention rates, lifetime values, or repeat behaviors by geo, you need something you can query with SQL, something that lives in your data warehouse. But you don’t have anything like that. You know there’s user IP addresses in your log data, you just need to turn them into locations. But Redshift doesn’t have a way to do that.
Anonymous IP addresses (sometimes incorrectly generalized as “proxies”) serve to hide a web user’s true IP address and obfuscate their geolocation. There are legitimate reasons, usually related to privacy or security, to use anonymous IPs, but many businesses find that fraudsters and other bad actors also use anonymous IPs in malicious ways that affect the bottom line.
MaxMind will be presenting alongside Shopify at the Merchant Risk Council’s flagship fraud prevention conference, MRC Vegas, Tuesday, March 20, from 2:15pm – 3pm.
Jenn Sessler, MaxMind’s Director of Business Development, andWill Mowat, Shopify’s Fraud Operations Lead, will be discussing the growing problem of account takeover and what merchants can do to combat it. Jenn and Will bring years of industry insight and first-hand experience with fraud prevention and risk mitigation to this informative and timely presentation on account takeover.
Digitally savvy consumers areincreasingly seeking online experiences tailored to their interests; meanwhile, web personalization companies likeGeoFli are increasingly seeking ways to deliver just the right experiences to those consumers, at the right time.
“We wanted to create a service to display website content based on a visitor’s IP address,” said GeoFli co-founder Nick Shontz. “Using MaxMind’s GeoIP2 City database combined with GeoFli’s custom software, we have seen conversion rates double for our customers. It’s great having an industry-leading tool like GeoIP2 City that’s so easy to integrate with our systems and have such great application and scalability,” Shontz added.
Free and open source code has been part of MaxMind’s technical and organizational foundation since our earliest days. As we continue to develop new products to better service our customers with a broader range of diverse and innovative offerings, we occasionally find it necessary to discontinue or phase out some of our products or services.
Accordingly, we have decided to discontinue the GeoLite Legacy databases on January 2, 2019. (Note that we will begin by discontinuing updates to the free GeoLite Legacy databases as of April 1, 2018. For info, see the “Important dates to consider” section.)
MaxMind is heading to ad:tech New York, one of the world’s largest conferences for digital brands and technology leaders. Come visit us at our booth and learn more about our GeoIP and minFraud products, and stick around for a speech hosted by our Director of Business Development Jenn Sessler.