why a different IP location

General Discussion about IP Address Lookup caveats, technology, ideas, etc.

Moderator: Moderators

why a different IP location

Postby needip on Wed Mar 29, 2006 11:33 am

Someone please help. i have found about a dozen IP address locators on line. when i do a search on a particular IP address they all show Inktomi in CA. However, hostip shows it as Austin, TX

Why is this coming up so much different? should i be thinking that the address is really in Austin?
needip
n00b
 
Posts: 8
Joined: Wed Mar 29, 2006 11:28 am

Postby robocoder on Wed Mar 29, 2006 10:25 pm

What's the IP address?
User avatar
robocoder
Veteran
 
Posts: 105
Joined: Sat Mar 25, 2006 8:10 pm
Location: Ontario, Canada

Postby needip on Thu Mar 30, 2006 3:36 am

68.142.200.123

thanks
needip
n00b
 
Posts: 8
Joined: Wed Mar 29, 2006 11:28 am

Postby Mister on Thu Mar 30, 2006 4:22 am

Output from ARIN WHOIS gives
OrgName: Inktomi Corporation
OrgID: INKT
Address: 701 First Ave
City: Sunnyvale
StateProv: CA
PostalCode: 94089
Country: US
NetRange: 68.142.192.0 - 68.142.255.255

So thats where the ISP is located

www.maxmind.com had same ouput...

BUT that ip 68.142.200.123 can maby live in Texas and that USER is using Inktomi Corporation as the ISP ?? Just my guess here... Coz I use BBB (my country is sweden) and i live in the northen part but the ISP is located south ...
<?
echo "Creating GE-GEOIP";
echo "Using hostip.info db :-)";
?>
Mister
n00b
 
Posts: 14
Joined: Sun Mar 19, 2006 2:40 pm
Location: SE

Postby robocoder on Thu Mar 30, 2006 9:09 am

needip wrote:68.142.200.123

thanks
As Mister points out, Sunnyvale is Inktomi's office address. Given the size of the netblock, it is reasonable to have remote offices or employees on the road, but not a certainty.

AFAIK, neither Inktomi nor its parent, Yahoo, are ISPs. (Yahoo does offer a branded DSL package with AT&T, but I would expect IPs to come from a netblock belonging to AT&T.)

I popped the resolved name: web30510.mail.mud.yahoo.com into my browser, and see that it takes me to a Yahoo webmail page. This, to me, says the netblock is used by their front-end/back-end webmail services, rather than assigned to individual users (ala DHCP).

So, unless Yahoo/Inktomi contributed the geolocation, I would ignore the Austin location.
Last edited by robocoder on Thu Mar 30, 2006 12:30 pm, edited 1 time in total.
User avatar
robocoder
Veteran
 
Posts: 105
Joined: Sat Mar 25, 2006 8:10 pm
Location: Ontario, Canada

Postby needip on Thu Mar 30, 2006 9:38 am

Thanks for your help.

I knew I was being too optimistic with the Austin answer, but I am cursious as to where this came from when all other seraches give me the sunnyvale address.
needip
n00b
 
Posts: 8
Joined: Wed Mar 29, 2006 11:28 am

Postby robocoder on Thu Mar 30, 2006 12:29 pm

needip wrote:Thanks for your help.

I knew I was being too optimistic with the Austin answer, but I am cursious as to where this came from when all other seraches give me the sunnyvale address.
hostip relies on the community for many "corrections". As such, there's a great deal of trust involved.

I suppose the captcha helps curb some of the abuse, but there's still the possibility of erroneous corrections (despite good intentions) and the weakness of the current database structure where a single IP address correction affects an entire /24 block (e.g., 68.142.200.*).
User avatar
robocoder
Veteran
 
Posts: 105
Joined: Sat Mar 25, 2006 8:10 pm
Location: Ontario, Canada

Postby needip on Thu Apr 06, 2006 10:27 am

I was thinking all along that it was popping up Inktomi becasue they were a internet provider, aka Broadband or Cable.

Are you saying that if i received an email from this IP address, that it most likely came from an employee of Inktomi?

thanks
needip
n00b
 
Posts: 8
Joined: Wed Mar 29, 2006 11:28 am

Postby bfolkens on Fri Apr 07, 2006 2:32 pm

robocoder wrote:I suppose the captcha helps curb some of the abuse, but there's still the possibility of erroneous corrections (despite good intentions) and the weakness of the current database structure where a single IP address correction affects an entire /24 block (e.g., 68.142.200.*).



Exactly, and in addition the next v. of the database incorporates changes to any size netblock - which helps the resolution (and size of) the database dramatically.
bfolkens
Site Admin
 
Posts: 154
Joined: Tue Feb 22, 2005 8:09 am

Postby needip on Sat Apr 08, 2006 7:04 am

Can someone answer my Inktomi question? does that address mean it came from an employee of the Inktomi corp? since they are not a internet provider?

thanks
needip
n00b
 
Posts: 8
Joined: Wed Mar 29, 2006 11:28 am

Postby robocoder on Sat Apr 08, 2006 11:32 am

As I alluded to earlier, the IP address appears to belong to a Yahoo webmail server. Austin is more likely where the server is located as opposed to where a particular user is.

Inktomi could have uploaded the netblock data -- it would make sense to have servers in geographically dispersed locations. That ip address is part of a large netrange: 68.142.192.0 - 68.142.255.255, and a cursory scan of the various /24 blocks says someone(s) provided cities for quite a few of them, including suspicious ones in Canada, New Zealand, and the UK.
User avatar
robocoder
Veteran
 
Posts: 105
Joined: Sat Mar 25, 2006 8:10 pm
Location: Ontario, Canada


Return to IP Address Lookup

Who is online

Users browsing this forum: No registered users and 11 guests

cron