Tell me about it. I've been having an exciting morning...

The oneliner was submitted early this morning, and that seems to have been the catalyst for the others.

Add this one: https://news.ycombinator.com/item?id=10119055

The data is as of March 2014, and therefore out of date -- I'm working on updating it right now. :)

As I remember from when the data was fresh, sometimes you do get crazy hops across the Atlantic like that, though.

Yeah, the MaxMind data is as of March 2014 -- out of date. Sorry about that!

Still not very accurate. It thinks my DigitalOcean droplet is in Russia. (actually in London)

Where's the direct link to obtain a copy of this updated GeoLite data (Apr 2015) pls?

1.1.1.0/24 [0] is described as "Research prefix for APNIC Labs", but it is part of AS15169 [1] which is "Google Inc."

Also part of that AS are 1.0.0.0/24 [2] and 1.2.3.0/24 "APNIC Debogon Project" [3]. Wikipedia has some information about Bogon filtering [4] and there have been some publications about the Debogon Project [5].

The now assigned addresses used to be unassigned "bogon" addresses, which are now assigned. I'm not sure why it's part of the Google AS, though. Maybe only because they get to see a lot of traffic?

0: http://ipinfo.io/AS15169/1.1.1.0/24

1: http://ipinfo.io/AS15169

2: http://ipinfo.io/AS15169/1.0.0.0/24

3: http://ipinfo.io/AS15169/1.2.3.0/24

4: https://en.wikipedia.org/wiki/Bogon_filtering

5: http://meetings.apnic.net/__data/assets/pdf_file/0019/18811/...

Fixed DEBUG to be False now -- thanks! I'll see if I can fix this 500, too. :)

It does say on the site "Uses GeoLite data from MaxMind, March 2014."

So not only is the Maxmind data well over a year out of date it's [citation needed] likely to be the free dataset which is only a subset of the Maxmind purchasable data

This should be fixed now -- thanks!

Agreed, most of the results I'm seeing don't make any sense at all. But IP geography has always been rather non-Euclidean.

Pretty funny to see what happens with www.1and1.com (my hosting provider). Boston to Wichita to Philadelphia... via Switzerland?

All I can think of is stuff like DNS cache poisoning from forcing lookups, which shouldn't be a threat these days (and there are infinite other ways to force the server to do DNS lookups). The purpose of scripts.mit.edu involves students and faculty running old versions of WordPress and writing custom PHP to learn the language, so the threat model very much assumes that malicious people have compromised at least one unprivileged account at any given time. Hostname lookups are a drop in the bucket compared to that.