Strange request send to IP identified in Iran

Hello,

I was testing the application rethink DNS, while it showed me that ntfy send requests to an ip adress identified in Iran.

I posted on Lemmy to see if somebody was able to explain why to iran. Here is the answer I got :

The IP seems to be in fact located in Germany and possibly it is an incorrect geoip entry.

Can someone confirm that it is the reason for this request ?

rethink uses ipinfo lite (db-ip.com before) - their info atm says germany. it’s a hetzner ip anyway. If you trace the network path you’ll see it’s their fsn1 datacenter.

It looks like there could be a bug in how Rethink “searches” IP ranges to geo location… Rethink doesn’t use the mmdb format, but pre-processes the csv (code) to make it “searchable”.

maybe?

3 Likes

Thank you for your answer and your digging. Really appreciate :slight_smile: