Tor IP DataBase

What IP DB is ToR using? Or it uses it’s self DB?

My relays geolocation is so wrong.
NL is seen in US…23.137.249.127 - srv-NtEZtI.incognet.io - The Netherlands - IncogNET LLC - IP address geolocation
MD is seen in IN…93.185.165.199 - chenxiao-264-2199 - Moldova - S.c. Infotech-Grup S.r.l. - IP address geolocation

I have checked others geolocation DB’s and the location is good, only ToRs is wrong

1 Like

www.ipfire.org - Location of 23.137.249.127
www.ipfire.org - Location of 93.185.165.199

3 Likes

This is caused by where the IP is registered and where it is deployed.

In the case of 23.137.249.127, maxmind says this:
country->isoCode NL - registeredCountry->isoCode US

The CIDR 23.0.0.0/8 is allocated to ARIN (American Registry for Internet Numbers)
https://whois.arin.net/ui/

So for 23.137.249.127

It is owned by IncogNET LLC which owns 23.137.248.0/21 but 23.137.249.127 is deployed in NL
Company IncogNet LLC
Street 30 N Gould St, STE 4000
City Sheridan
State/Province WY
Postal Code 82801
Country US

You can get the same for 93.185.165.199 by using RIPE Webupdates — RIPE Network Coordination Centre

3 Likes

Get current geofeeds from the provider and create an issue at https://www.ipfire.org
¹I did this for Frantech/BuyVM and others for other providers.

You can find relevant threads in the tor-relays-list archive.

¹In my bug report, you can also read why ARIN IPs in particular so often have incorrect data. As always, it’s about money. The best thing is to ask the provider for geofeed data like I did with Frantech.

A few years ago, TorProject had to change its database because Maxmind changed its license and wanted money for access.
IPFire is open source and free forever. All improvements benefit the entire open source community forever.

1 Like