ips don't match whois

Any feedback, suggestion, bug reports, problems....
Post Reply
morongo
Posts: 4
Joined: Fri Mar 27, 2009 4:06 pm

ips don't match whois

Post by morongo » Fri Mar 27, 2009 4:29 pm

In a couple of cases, I'm seeing IPs that don't match up.

coasttocoastam.com is in Cambridge MA, it shows as France
servehttp.com (your server) is in Reno Nevada, it shows as UK (94.169.136.232)

Just wondering, I've been using Flagfox for over a year, keep it updated, haven't run into this before.

Have 3.3.10 installed, running FF3.0.7
I'll keep a list of other stuff I run into

PS:
Ran another instance of FF while I was posting this to get the IPs and -now- coasttocoast shows correctly as US.
flagfox.servehttp.com still shows UK, as above (which may be right for all I know).

User avatar
rleeden
Site Admin
Posts: 117
Joined: Mon Oct 01, 2007 3:13 pm
Location: United Kingdom
Contact:

Re: ips don't match whois

Post by rleeden » Fri Mar 27, 2009 5:00 pm

The location of IP address of a website is not related to the whois data for it's domain.

For instance my websites http://flagfox.servehttp.com and http://geotool.servehttp.com are located in the UK as correctly identified by Flagfox, but the domain that they use (servehttp.com) is registered to a company called NO-IP.com who according to the whois data are based in Reno, Nevada. The whois data just shows information about the owner of the domain name, not about any websites that may use that domain.

If you look at some other websites ending in servehttp.com (use http://www.google.com/search?q=allinurl:servehttp.com to find some) you'll see that they're dotted all over the place.

Richard

PS. Not sure what happened with coasttocoastam.com for you the first time round.

morongo
Posts: 4
Joined: Fri Mar 27, 2009 4:06 pm

Re: ips don't match whois

Post by morongo » Fri Mar 27, 2009 5:32 pm

Thanks, Richard.

The coasttocoast flag is what got my attention to begin with, they've always had a US location (last 4 years anyway).
The locations my own webhost uses have always kept me in the US, too. Although they have changed server-farms once since I've been with them, the nameservers have remained consistent and, of course, my actual IP never changes (had the same IP since '97).

If a domain owns a block of IPs, how do you know where the various IPs are actually located (just curious)?

User avatar
DaveG
Flagfox Developer
Posts: 723
Joined: Wed Oct 03, 2007 9:06 pm
Location: Philadelphia, USA

Re: ips don't match whois

Post by DaveG » Fri Mar 27, 2009 10:11 pm

I don't really think there is a quick and simple way to list all the subdomains for a domain and lookup their IPs. The allinurl Google lookup will give you many of the subdomains, though. (on a side note, nifty that we're the top 2 servehttp.com subdomains ;) They're just a free domain name service, so there's quite a few.

The real issue you're hitting here is that doing a Whois for flagfox.servehttp.com returns a Whois for the root domain, servehttp.com. Subdomains don't get their own Whois records. If they did, they'd probably give you the results you'd expect. However, domains are registered with DNS services whilst subdomains are declared by the server with the domain, so it doesn't really make sense for them to all be listed in Whois.

morongo
Posts: 4
Joined: Fri Mar 27, 2009 4:06 pm

IP match - screen caps

Post by morongo » Mon Mar 30, 2009 5:09 am

Here's what I was talking about.
Check out the IPs:

Image
Image

Now, check out the times at the bottom of these geotools images:

Image
Image

Allowing for GMT, the bottom capture was done <4 minutes after the top capture. I did a refresh in between.
It might be that Akamai is setup to serve the site from regional servers and it thought i was coming in from the EU (twice).
Just wanted to show you guys so you didn't think i was nuts.


Tony

User avatar
rleeden
Site Admin
Posts: 117
Joined: Mon Oct 01, 2007 3:13 pm
Location: United Kingdom
Contact:

Re: IP match - screen caps

Post by rleeden » Mon Mar 30, 2009 8:41 am

morongo wrote: It might be that Akamai is setup to serve the site from regional servers and it thought i was coming in from the EU (twice).
Just wanted to show you guys so you didn't think i was nuts.
Didn't think you were nuts :)

And, yes looks like their website is set up to do some redirection. Although, I consistently get the US and as I'm in England you'd think I'd end up on one of their servers in the EU. Not sure what they base their redirection on.

Richard

PS. I've merged this topic back into the original topic you created.

User avatar
DaveG
Flagfox Developer
Posts: 723
Joined: Wed Oct 03, 2007 9:06 pm
Location: Philadelphia, USA

Re: ips don't match whois

Post by DaveG » Mon Mar 30, 2009 1:52 pm

Could be load balancing; could be anything.

For what it's worth, I get a US server consistently which makes sense seeing as it's only a few states northeast of me, though if I were to visit the site regularly I might get another. There's really no way to tell what their server redirection logic is here, and in this case so long as the sites load fine it doesn't really matter. ;)

morongo
Posts: 4
Joined: Fri Mar 27, 2009 4:06 pm

Re: ips don't match whois

Post by morongo » Mon Mar 30, 2009 6:14 pm

Yeah, I was just wondering how far I could trust MaxMind's database results.
In this case it looks like it's an Akamai thing, they own both IP blocks and they are located as shown above.

Incidentally, your add-on is a really useful utility, thanks for creating it!

inetnum: 80.154.117.0 - 80.154.117.255
netname: AKAMAI-TECHNOLOGIES-LOSANGELES-1

inetnum: 80.67.64.0 - 80.67.74.255
netname: AKAMAI-PA

Tony

aral
Posts: 3
Joined: Thu Sep 06, 2012 3:52 am

Re: ips don't match whois

Post by aral » Thu Sep 06, 2012 3:58 am

I had a Whois search on your domain name at http://www.WhoisXY.com . And had an IP lookup at http://www.ip-details.com .The results shows around US location only. I think they are fine.

Post Reply