DNSprobe Wiki - IP
IP Geolocation
IP geolocation estimates the country, region, provider, and hosting type associated with an address.
These data come from public or commercial databases and should be read as indicators, not guaranteed physical location.
They help spot a server hosted in an unexpected country, a proxy/VPN IP, or infrastructure that does not match the expected provider.
1. Overview
IP geolocation associates an address with a country, approximate city, timezone, ISP, or organization.
GeoIP databases are updated regularly, but they can be inaccurate after a migration, block reassignment, or CDN use.
2. What DNSprobe checks
DNSprobe fetches public fields to provide operational context about the address.
- Country, region, city, timezone, and approximate coordinates.
- Organization, ISP, ASN, and AS name when available.
- Proxy, mobile, or hosting indicators when supplied by the source.
3. Interpreting results
Unexpected geolocation is not always wrong, especially with CDNs and cloud providers.
- Expected country: consistent with the chosen location or provider.
- Unexpected country: check CDN, proxy, anycast, or an old IP.
- Proxy/hosting: normal for a server or CDN, more suspicious for an address expected to be residential.
4. Best practices
- Do not use GeoIP as the only proof of location or ownership.
- Compare with ASN, WHOIS, certificates, and provider configuration.
- Check after DNS migrations or CDN changes.
- Account for anycast: the same IP can serve multiple regions.
5. Manual tests
Query multiple sources for comparison.
curl 'http://ip-api.com/json/203.0.113.10'
whois 203.0.113.10Displayed coordinates are approximate and may point to the provider rather than the exact server.