Page 1 of 1

why a different IP location

PostPosted: Wed Mar 29, 2006 11:33 am
by needip
Someone please help. i have found about a dozen IP address locators on line. when i do a search on a particular IP address they all show Inktomi in CA. However, hostip shows it as Austin, TX

Why is this coming up so much different? should i be thinking that the address is really in Austin?

PostPosted: Wed Mar 29, 2006 10:25 pm
by robocoder
What's the IP address?

PostPosted: Thu Mar 30, 2006 3:36 am
by needip
68.142.200.123

thanks

PostPosted: Thu Mar 30, 2006 4:22 am
by Mister
Output from ARIN WHOIS gives
OrgName: Inktomi Corporation
OrgID: INKT
Address: 701 First Ave
City: Sunnyvale
StateProv: CA
PostalCode: 94089
Country: US
NetRange: 68.142.192.0 - 68.142.255.255

So thats where the ISP is located

www.maxmind.com had same ouput...

BUT that ip 68.142.200.123 can maby live in Texas and that USER is using Inktomi Corporation as the ISP ?? Just my guess here... Coz I use BBB (my country is sweden) and i live in the northen part but the ISP is located south ...

PostPosted: Thu Mar 30, 2006 9:09 am
by robocoder
needip wrote:68.142.200.123

thanks
As Mister points out, Sunnyvale is Inktomi's office address. Given the size of the netblock, it is reasonable to have remote offices or employees on the road, but not a certainty.

AFAIK, neither Inktomi nor its parent, Yahoo, are ISPs. (Yahoo does offer a branded DSL package with AT&T, but I would expect IPs to come from a netblock belonging to AT&T.)

I popped the resolved name: web30510.mail.mud.yahoo.com into my browser, and see that it takes me to a Yahoo webmail page. This, to me, says the netblock is used by their front-end/back-end webmail services, rather than assigned to individual users (ala DHCP).

So, unless Yahoo/Inktomi contributed the geolocation, I would ignore the Austin location.

PostPosted: Thu Mar 30, 2006 9:38 am
by needip
Thanks for your help.

I knew I was being too optimistic with the Austin answer, but I am cursious as to where this came from when all other seraches give me the sunnyvale address.

PostPosted: Thu Mar 30, 2006 12:29 pm
by robocoder
needip wrote:Thanks for your help.

I knew I was being too optimistic with the Austin answer, but I am cursious as to where this came from when all other seraches give me the sunnyvale address.
hostip relies on the community for many "corrections". As such, there's a great deal of trust involved.

I suppose the captcha helps curb some of the abuse, but there's still the possibility of erroneous corrections (despite good intentions) and the weakness of the current database structure where a single IP address correction affects an entire /24 block (e.g., 68.142.200.*).

PostPosted: Thu Apr 06, 2006 10:27 am
by needip
I was thinking all along that it was popping up Inktomi becasue they were a internet provider, aka Broadband or Cable.

Are you saying that if i received an email from this IP address, that it most likely came from an employee of Inktomi?

thanks

PostPosted: Fri Apr 07, 2006 2:32 pm
by bfolkens
robocoder wrote:I suppose the captcha helps curb some of the abuse, but there's still the possibility of erroneous corrections (despite good intentions) and the weakness of the current database structure where a single IP address correction affects an entire /24 block (e.g., 68.142.200.*).



Exactly, and in addition the next v. of the database incorporates changes to any size netblock - which helps the resolution (and size of) the database dramatically.

PostPosted: Sat Apr 08, 2006 7:04 am
by needip
Can someone answer my Inktomi question? does that address mean it came from an employee of the Inktomi corp? since they are not a internet provider?

thanks

PostPosted: Sat Apr 08, 2006 11:32 am
by robocoder
As I alluded to earlier, the IP address appears to belong to a Yahoo webmail server. Austin is more likely where the server is located as opposed to where a particular user is.

Inktomi could have uploaded the netblock data -- it would make sense to have servers in geographically dispersed locations. That ip address is part of a large netrange: 68.142.192.0 - 68.142.255.255, and a cursory scan of the various /24 blocks says someone(s) provided cities for quite a few of them, including suspicious ones in Canada, New Zealand, and the UK.