Do all organisations "broadcast" their IP range?

Sorry if wrong forum, wasn't sure where best to ask this:

At my place of work we are engaging a company who say they can tell us the name of EVERY organisation that visits our website for sales leads etc. Not talking about completing form submissions or anything like that, but only via IP addresses/ranges and whatever other trickery they can employ.

Is this really possible from a technical standpoint? I know lots of larger/public organisations "broadcast" their IP ranges as it were so its relatively easy to tell when they have visited but what about smaller business etc that just have a typical £50/month business broadband package with BT or whoever...can all of these companies be identified and named when visiting our website as this company seems to be claiming? Wouldn't we just see a load of ISP/host names rather than the actual companies looking at our website?

I'd question the claim that they could identify every organisation. I might accept that they could identify most of them but I'd be surprised if they could ID more than 75%.

I can tell you that I'd be very, very unhappy if I received a communication from a company just because I happened to hit their website. If a company is offering a service I want then I'll contact them. I dislike marketing and especially detest spam. Any company that pursues me out of the blue will get put on the block list PDQ.

Edited by Andrue (Wed 09-Jun-21 20:43:50)

I think having access to cookies of the visitors would help too.

Thanks
Dan

What’s the name of the company?

In reply to a post by office123:

At my place of work we are engaging a company who say they can tell us the name of EVERY organisation that visits our website for sales leads etc.

And there are companies working on defending against acts such as this.

All IP address ranges are assigned by central IP management organisations. There is a worldwide register of who each IP address/range is assigned to. The register used to be freely available via whois services but is now redacted from public access because of GDPR (this was how they protected individuals registering domains). They still may not be able to identify everyone as people could be using VPNs or web proxies to mask their IP address or they could be using IP addresses owned by their ISP (as would be the case for most consumer connections) or the IP address could be owned by a parent company.

Assuming the company has access to the unredacted databases then yes they could see who every IP address is registered to.

However, be careful using this data for direct marketing as you need to make sure you are complying with GDPR and either have consent or can show "legitimate interests" - if you can't show either of these then you could be in trouble with the ICO.

I wonder if they simply ask for or gain access to all cookies, and analyse them? It can't be too difficult to accumulate a database of those encountered, many of them easily identified from their content.

That's similar to what I was thinking.

Thanks
Dan

In reply to a post by Pheasant:

What’s the name of the company?

I'm hearing these claims via a colleague rather than from horses mouth so I wont say for now but there seems to be quite a few companies offering this type of service it seems.

In reply to a post by pluralist:

I wonder if they simply ask for or gain access to all cookies, and analyse them?

That would be a ridiculous thing for a web browser to permit.