We have been getting a lot of fraud orders. We know they are fraud orders before we process it. However we seem to be getting them from the same IP. How do we find out the city or state from the IP address?

http://www.visualroute.com/

you can also get a slight idea by checking out ripe.net, arin.net and any other IP registry

http://www.arin.net/whois/
Like Apollo said, Arin whois is the best.

Originally posted by globetrekker
http://www.arin.net/whois/
Like Apollo said, Arin whois is the best.

Depends what region of the world you are in.

Arin (http://www.arin.net) = North and South America, the Caribbean, and sub-Saharan Africa
RIPE (http://www.ripe.net) = Europe, The Middle East, Central Asia and African countries located north of the equator representing 109 countries in its service region
APNIC (http://www.apnic.net) = APNIC serves the entire Asia Pacific region, comprising 62 economies in Asia and Oceania

:( I hate fraud orders1!!

I'm willing to bet it's an asian based IP addy. We get a lot of fraud orders a day from Asia. We almost thought about blocking all Asian IP's all together until they get their act together and start taking security seriously.

I'm willing to bet it's an asian based IP addy. We get a lot of fraud orders a day from Asia. We almost thought about blocking all Asian IP's all together until they get their act together and start taking security seriously.

Actually, we have already done that...a large portion of our fraud was coming from Asia, in fact, I have never received a legit order from Asia...just blocking a few 'problem countries' has cut back on our fraud considerably...

Originally posted by Tom Pyles


Actually, we have already done that...a large portion of our fraud was coming from Asia, in fact, I have never received a legit order from Asia...just blocking a few 'problem countries' has cut back on our fraud considerably...

I always suggest incorporating traceroute in all order scripts to track down IP address by reverse DNS records... :)