[Apache/PHP] IP locator..

[HarshReality]

Noticed dev: http://dev.tornevall.net/?load=dev_city

would you be willing to release source? I am interested in creating my own access logs to my site (txt file) but would like to pass the variables out and have flash invisible.. Then if proxy accesses or attacks site I can identify the proxy IP and the IP behind it.

Dont know if that makes sense...

[Tornevall]

Sv: IP locator..

It's actually just a script-in-a-shell (flash) that returns information about ip-addresses with the help of passive fingerprinting. The script itself looks like this:

http://dev.tornevall.net/city.php?self=1

The rest is handled with a MySQL-supported version of p0f (http://lcamtuf.coredump.cx/p0f.shtml). I tink it's located at http://freshmeat.net/projects/p0f-db

Except for

$city = city($_SERVER['REMOTE_ADDR']);

That part is a mix of different "city locators", one of the bigger locators used is GeoLiteCity from Maxmind: http://www.maxmind.com/app/geolitecity

And then there's smaller "homemade" city-fetchers, but they get most of the information from swedish ipadresses (those sources are actually some swedish wikis ).