GeoIP Database
MaxMind's GeoIP database maps IP addresses to physical locations including countries, cities, and geographic coordinates. We use the free GeoLite2 tier to provide IP geolocation across all our sites, enabling users to determine the approximate physical location of any IP address on the internet.
Source:GeoIP Database
What is the GeoIP Database?
IP geolocation works by mapping allocated IP address blocks to geographic locations. MaxMind, a US-based company founded in 2002, maintains one of the most widely used geolocation databases in the industry. They build their database through a combination of methods:
- RIR allocation data - Regional Internet Registries record which country each IP block is allocated to, providing a baseline of country-level accuracy
- Network topology analysis - Traceroute measurements and network latency data help pinpoint where IP addresses are actually used, which may differ from where they are registered
- ISP and organization data - Mapping IP blocks to known ISP service areas narrows geographic precision
- User-contributed corrections - MaxMind accepts corrections from IP address holders who report inaccurate geolocation for their blocks
MaxMind offers two product tiers: GeoIP2 (commercial, higher accuracy, city-level precision) and GeoLite2 (free, slightly lower accuracy, same database structure). Both provide country, city, postal code, latitude/longitude, and timezone data. The GeoLite2 database we use is available under a permissive license requiring attribution and periodic updates.
Country-level accuracy typically exceeds 99% for most regions. City-level accuracy varies significantly by country and ISP, ranging from roughly 50% to 80% depending on the region. IP addresses behind carrier-grade NAT, VPNs, or cloud hosting may geolocate to the data center or corporate headquarters rather than the actual end user.
How We Use This Data
IP geolocation appears throughout our sites wherever IP addresses are displayed. On robtex.com, rbls.org, and dns.ninja, IP lookup pages show the estimated country and city for each address. On rtsak.com, AS and prefix pages display the geographic distribution of IP space within a network.
The geolocation data serves several purposes for our users:
- Network diagnostics - Understanding where servers are physically located helps diagnose latency and routing issues
- Security analysis - Geographic context for IP addresses involved in suspicious activity helps assess threats. An SSH brute-force attempt from an unexpected country stands out differently than one from a known office location
- Infrastructure mapping - Viewing the geographic spread of an organization's IP space reveals their data center footprint and hosting strategy
We display geolocation as supplementary context alongside authoritative data like WHOIS records and BGP routing information. Users should treat geolocation as an approximation, not a definitive physical location.