xanalyse tool uses a database called IP_GEOLOC.
The latter consists of two tables labeled IP and MAPS. The IP table gives
the correspondence between an IP address, latitude, longitude, ISO 3166 code and
AS number of a country. While the MAPS table gives the mapping between
an IP address, the coordinates (mapx, mapy) in the output image and the ISO 3166 code of a country.