• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 721
  • Last Modified:

How to set Geo-location of an IP address

Hi! I'm wondering how to set the geo-location of an IP address as well as the ISP name.

I had always presumed this was determined by the 'OrgName' and the data that follows it. I then thought it was 'CustName' and following data. But now I'm not sure.

For example, I have 2 ARIN subnets. Both are registered to the same ISP, 'OrgName', in same country ('country A'). Both have been reassigned to 'CustName' in another country ('country B').

Now, when I do a geoIP lookup for an IP from one subnet, I get ISP 'CustName' from city in 'country B'. When I do a geoIP lookup for an IP from the other subnet I get ISP 'OrgName' from city in 'country A'.

I don't really understand why. Hope someone can shed some light on this.
0
Julian Matz
Asked:
Julian Matz
  • 6
  • 5
1 Solution
 
harbor235Commented:


You cannot set that information, the ISP owns the space so they set it. Get the ISP to update the information if it's not correct.  The information is not 100% accurate since it depends on registering orgs to add the informaton correctly.



harbor235 ;}
0
 
Julian MatzJoint ChairpersonAuthor Commented:
Hi harbor235,

I know I can't set the information myself, but need to know how it works in order to be able to ask/make the right questions/requests.

I used the following ARIN template to enter the correct customer information:
https://www.arin.net/resources/templates/reassign-simple.txt

I sent this template to my data center/ISP who submitted it to ARIN. Now both subnets appear to have the same information in the ARIN database, yet one shows my ISP name under "ISP" and the ISP's country, and the other subnet shows my country and my company name under "ISP" when I do a geoIP lookup.

Thanks for your help.
0
 
harbor235Commented:


The RIR's maintain whois servers so which can be queried, blocks are assigned to certain registries and GEOPIP leverages this. You need to query ARIN as to why the information in the template is different than that queried at their whois server.

querry the ARIN whoi directly and see if the info is correct;

http://ws.arin.net/whois/

harbor235 ;}

0
Improve Your Query Performance Tuning

In this FREE six-day email course, you'll learn from Janis Griffin, Database Performance Evangelist. She'll teach 12 steps that you can use to optimize your queries as much as possible and see measurable results in your work. Get started today!

 
Julian MatzJoint ChairpersonAuthor Commented:
I have checked http://ws.arin.net/whois/ . Both subnets appear to have the correct information.

I see you have an email address listed under your profile... May I email you with details so you can have a look yourself?
0
 
harbor235Commented:


sure,

harbor235 ;}
0
 
harbor235Commented:


The question we need answered is, what whois database is the geoip tool that you are using query?

harbor235 ;}
0
 
Julian MatzJoint ChairpersonAuthor Commented:
I've tried a few of them including following:

http://whois.sc/xx.xxx.xxx.xxx
http://www.ip2location.com/demo.aspx
http://www.ipaddresslocation.org/ip-address-locator.php

As well as a few others that I can't remember now. I'll send you an email with two IPs you can use to compare.
0
 
harbor235Commented:

I understand and have witnessed what your are explaining, my thoughts are the following;
 
When was your information last updated? I read that some of the geo-location services download the entire database
and update periodically, is the information you are seeing the way it used to be before your last update?
 
Check with the vendor, find out the source of the RIR/whois database, it may be a hybrid. Also, check
out their polices for data update.
 
I am sorry I cannot be more helpful, I am however interested in your problem. Please feel free
to bounce things off me or ask further questions. I have learned something today.
 
There is a mailing list for all the N. American network operators (NANOG), perhaps an email onto
their public mailing list will yield results.

harbor235 ;}
0
 
Julian MatzJoint ChairpersonAuthor Commented:
Thanks! Will wait a little longer and see if the databases get updated ...
0
 
adrimansscCommented:
try to use this site:

http://www.myiptest.com/

then you can use IP Whois function to compare results: http://www.myiptest.com/staticpages/index.php/whois-ip-whois-domain-name-information
0
 
Julian MatzJoint ChairpersonAuthor Commented:
Hi adrimanssc,

Thanks for that. I'm getting the same results on that site. The only difference is the "ISP" but country is the same. Both IP blocks have the same information (Whois on ARIN), but one IP shows country A and the other shows country B.
0
 
Julian MatzJoint ChairpersonAuthor Commented:
I like the site though. The only thing that's missing is a DNS Report tool - then it'd be just as useful as dnsstuff.com ...
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Improve Your Query Performance Tuning

In this FREE six-day email course, you'll learn from Janis Griffin, Database Performance Evangelist. She'll teach 12 steps that you can use to optimize your queries as much as possible and see measurable results in your work. Get started today!

  • 6
  • 5
Tackle projects and never again get stuck behind a technical roadblock.
Join Now