Sometimes it just because they have to announce to another region without
changing IRR.
They are a lot of geolocation database, but only ipip and ipinfo can
correct the geolocation based on BGP routing information.
I'm assuming ipinfo is doing some scan, if the subnet have too many open 22
or 443
On Mon, 3 Feb 2025, Scott Q. wrote:
What are you guys using as a reliable GeoIP database ? I've tried Maxmind and a
few others, also checking against ARIN but there's tons of
differences.
For example: 1.2.9.0/24 . ARIN says it belongs to China Telecom but others say
it's part of Russia: https
100%. We have certain things we do here at ThreatSTOP that isolate some
locations based on the upstream provider because all of the GeoIP databases are
wrong.
If we collectively understand that GeoIP is “best guess” or “best attempt” and
not gospel, we’d all be better off.
—
Joel Esler
Vice
This is factual. I spend a significant amount of effort ensuring geoip is
accurate for our customers and the proliferation of vendors makes this very
annoying and time consuming when we are onboarding a new block. RFC9632 at
least makes this easier - I definitely recommend doing so if you are not.
I don't feel like there is any reliable GeoIP database. The protocol wasn't
designed for this and thus there is a lot of false information presented
about where IP addresses are located.
On Mon, Feb 3, 2025 at 10:28 AM Dmitriy A. wrote:
> We've been dealing with geoip issues for quite a while an
We've been dealing with geoip issues for quite a while and this is what we
came up with, maybe it would be useful for you
https://github.com/jsdelivr/globalping/blob/master/docs/geoip.md
But we're also in progress of updating the logic to include latency as an
additional parameter.
On Mon, Feb 3,
>From my experience, ipinfo.io is one of the most reliable GeoIP
databases
As for 1.2.9.0, it is not present in the DFZ, so I doubt you will find
any correct GeoIP data for it anywhere.
On Mon, 2025-02-03 at 06:17 -0500, Scott Q. wrote:
> What are you guys using as a reliable GeoIP database ? I'v
* qm...@top-consulting.net (Scott Q.) [Mon 03 Feb 2025, 12:18 CET]:
What are you guys using as a reliable GeoIP database ? I've tried
Maxmind and a few others, also checking against ARIN but there's
tons of differences.
For example: 1.2.9.0/24 . ARIN says it belongs to China Telecom but
other
IPInfo would be a solid choice, but MaxMind is also reliable in most cases.
However, some IP databases often provide inaccurate results, and I would
recommend avoiding IPStack.
ARIN WHOIS is updated by the IP owner or user and can often be outdated or
inaccurate, as many operators do not update it
9 matches
Mail list logo
