Consensus does not equate to accuracy. Verify the IP location yourself

I came across this IP address: 154.30.27.228

As of Feb 17, 2024, we say this IP address is located in Ashburn, Virginia, United States.

https://ipinfo.io/154.30.27.228/json
{
    "ip": "154.30.27.228",
    "city": "Ashburn",
    "region": "Virginia",
    "country": "US",
    "loc": "39.0437,-77.4875",
    "org": "AS205659 UAB code200",
    "postal": "20149",
    "timezone": "America/New_York",
    "readme": "https://ipinfo.io/missingauth"
}

However, some providers say the IP address is located in Djibouti.

Provider #1

Provider #2

Provider #3

image

Provider #4

image

Provider #5

image

Djibouti and Ashburn are a LOOOONG way apart. Five other IP geolocation providers say the IP address is located in Djibouti, while we are the only one who point to a location eleven thousand kilometers off!

Not agreeing with the majority does not mean we are inaccurate. In this instance, we are correct while everyone else is wrong. I will leave the rhetoric alone and go through the evidence.

Ping based geolocation

We use ping/probe geolocation backed by our proprietary ProbeNet infrastructure. This IP address is pingable. We can use a third-party ping provider to verify the location. We ping the IP address from multiple servers, then we can sort the average time and see which locations have the lowest RTT.

We can ping the IP addresses from a site like Ping.sx, which has the facility to ping an IP address from multiple locations. After the ping operation, we can sort the resulting table by average RTT in descending order. The closer a server is to the target IP address, the lower the average or minimum RTT is going to be.

:link: Data from ping.sx

Note that Ping.sx does not have a probe server in Virginia; however, servers in the United States have the lowest ping times.

Also, there is a special note here: we use a combination of ping data and public internet records. Our ping data was able to verify the location information shared in the geofeed. By using a combination of ping and up-to-date internet records, we can ensure the highest accuracy possible.

Internet public records

From internet public records like Geofeed and WHOIS data, we can see that the IP address belongs and returns the following information.

PSINet, Inc. COGENT-153-30-16 (NET-154-30-0-0-1) 154.30.0.0 - 154.30.255.255
Aventice LLC AVENTICE-CGNT-NET-11 (NET-154-30-0-0-2) 154.30.0.0 - 154.30.31.255

Taking a closer look at the organization with a smaller range, we can see that the country of the organization points to the US. This WHOIS information can also be found on IPinfo: 154.30.24.0/22 IP range details - IPinfo.io

The organization even links the geofeed data in their WHOIS data.


I have no clue why the other geolocation provider chose Djibouti when the geofeed data points to the US, as the headquarters of the organization is in the US, and the most obvious evidence, ping data, points to the US. There is evidence that the IP address is located in the United States.

Maybe it is stale data, maybe it is from some Afrinic regional office, or maybe other providers just put that location just because. At the end of the day, they have placed the IP address 11,000 kilometers away from its actual location. Once some industry leaders did that, other providers blindly followed them, resulting in inaccuracies in consensus.

It may sound strange to say this, but consensus holds little significance in IP geolocation. We utilize probe-based techniques, while much of the industry relies on self-reported unverifiable public records. Just because a location is commonly reported by a bunch of geolocation provider does not mean it is correct. Individuals and large organizations alike use various geolocation data sources and often select locations based on the most frequently reported ones and here we can see how wrong this strategy is.

It must be noted that selecting from multiple providers and reaching a consensus does not guarantee accuracy. Our focus is on being right rather than conforming. Therefore, if you opt for the majority-reported locations, you may not always be choosing the accurately reported location data by IPinfo.

In the case of some commercial VPN providers, I think they falsify some of their “server locations” and the only reason to do so would be to claim more locations than they actually hold.

I found this out by a real life example. Netflix Nigeria have low cost subscriptions. Connected to “Nigeria” via ivacy VPN (ivacy .com/vpn-servers/ claims to have Nigerian server, vpnalert .com/guides/ivacy-vpn-servers/ states ivacy has four servers in Nigeria).

Once connected, browsing to Netflix resulted in Netflix Netherlands loading. Thinking that was odd, I did a lookup: 172.111.128.228 IP Address Details - IPinfo.io which confirmed a Netherlands location.
I know of other individuals who used other VPN’s (Tunnelbear, PureVPN, PIA; at least Cyberghost state Lagos, Nigeria (via Madrid, Spain)) and got connected to Netflix Germany and Spain, so other VPN’s are also making untruthful claims.

Emailed support: "Setting to Nigeria then browsing to Netflix loads Netflix Netherlands so it appears ivacy don’t actually have any servers in Nigeria? "

Response: “Dear Esteemed Customer, Thanks for your email to notify us of the difficulties you have been experiencing with our Service recently. We would like to inform you that Netflix is the Geo-restricted content and we are currently not offering Netflix NG with our services. For the time being, we only support Netflix, the US, UK, AUS, Canada, Germany, France, and Japan. Please refer to the link below for details.”

Conclusions:

  • ivacy, amongst other VPN providers, claim to have servers in locations they do not
  • when asked a direct question, they obfuscate and avoid answering the question
  • Netflix might be using ipinfo :slight_smile:

Suggestion: a little project where ipinfo utilize their IP data and list commercial VPN’s that have IP’s/Servers in locations other than what they claim so end consumers can make informed choices of what is real IP locations and what is fake.

1 Like

I am in the same boat. I sometimes buy servers for our ProbeNet (the network we use to produce the data). Sometimes I get burned when the provider falsifies location reporting. When I reach out to them, they say more or less the same thing as the VPN provider told you.

Setting to Nigeria then browsing to Netflix loads Netflix Netherlands so it appears ivacy don’t actually have any servers in Nigeria?

This is super annoying. Lagos, Nigeria, has a bunch of data centers. Even AWS operates there: AWS announces new edge location in Nigeria

This is not a remote place. Getting a VPN server in Nigeria and South Africa is easy. But nobody can beat NL server prices. The entire country seems to be a data center!

a little project where ipinfo utilize their IP data and list commercial VPN’s that have IP’s/Servers in locations other than what they claim so end consumers can make informed choices of what is real IP locations and what is fake.

I will let the team know. After looking at the VPN provider you mentioned, it appears that they do not have many self-owned IP addresses to operate as a VPN provider. They are likely one of the many providers that use the same IP address ranges provided by VPN hosting services. The quality of their services may not be good.

1 Like