Detected Germany as country or USA IP?

toplisek

Well-Known Member
Jan 7, 2010
260
20
68
We have noticed interested Firewall blocked access.
Should we trust country detection or IP. As I understand country can be masked and also country. Which value is more to trust as IP is from USA and premium domain and country is from Europe.
 

cPRex

Jurassic Moderator
Staff member
Oct 19, 2014
11,743
1,868
363
cPanel Access Level
Root Administrator
Hey there! That is really up to you and how specific you want to be. While there is no perfect list of IPs for each country, blocking a specific country using the country code block will block nearly all that traffic. Using an IP address or a range of IP addresses would be more specific, but you would have to know the range you want to block.
 

toplisek

Well-Known Member
Jan 7, 2010
260
20
68
It is a message from Firewall and IP is from USA but country is posted as Germany.
 

toplisek

Well-Known Member
Jan 7, 2010
260
20
68
If there is attack and unknown IP, how to see real IP source in this case? Is it masked IP detection?
An example: IP: 2604:a880:0:XXX (Unknown)