# Different locations for one IP address 89.248.171.144

**URL:** <https://discuss.elastic.co/t/different-locations-for-one-ip-address-89-248-171-144/180870>\
**Category:** Elasticsearch\
**Created:** [May 13, 2019, 7:34pm UTC](https://discuss.elastic.co/t/different-locations-for-one-ip-address-89-248-171-144/180870 "2019-05-13T19:34:02Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![mayer](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mayer/32/42164_2.png) [@mayer](https://discuss.elastic.co/u/mayer)\
**Post date:** [May 13, 2019, 7:34pm UTC](https://discuss.elastic.co/t/different-locations-for-one-ip-address-89-248-171-144/180870/1 "2019-05-13T19:34:02Z")

</div>

Dear All,

my environment ELK 6.6.1  
there I run two different applications on the same ELK stack. These are elastiflow 3.4.1 which receives the flows from a Cisco boarder gw router. And there is a filebeat which receives data from a bind9 query log. In both I have the possibility to visualize the geolocation. For one and the same IP 89.248.171.144 I get two different locations. Elsatiflow shows it in Netherlands. Filebeat in Seychelles. Also different sources in the Internet are showing different results. Obviously there I have two different geo-DB's in my ELK stack. Is there a way to synchronize or to update to latest version ?  
Sitenote: I did some traceroute via Ripe NCC Atlas probes and it seems that last hop went to AS202425 which was allocated to Seychelles in 2018.

Kind regards  
Hans

--

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 10, 2019, 7:34pm UTC](https://discuss.elastic.co/t/different-locations-for-one-ip-address-89-248-171-144/180870/2 "2019-06-10T19:34:04Z")

</div>

Closed on June 10, 2019, 7:34pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
