GeoIP seems wrong

dkmcgowan

I'm trying to figure out an IP block. I was unable to login to my VPN and was on tmobile 5G. The IP has since changed, but here was my info I gathered.

172.58.159.211

Maxmind search shows

172.58.159.211	US	Charlotte,
North Carolina,
United States,
North America	172.58.159.0/24	28202	35.2316,
-80.8428	200	T-Mobile USA	T-Mobile USA		517

This is the block rule I get, it thinks it's Guam

Jan 22 22:57:17,1770004645,igb0,WAN,block,4,17,UDP,172.58.159.211,127.0.0.1,56346,1194,in,GU,pfB_Oceania_v4,172.58.159.0/24,GU_v4,Unknown,router.mine.io,null,+

I checked and my lists were updated, but this is what I get from pfsense executions

mmdblookup -f /usr/local/share/GeoIP/GeoLite2-Country.mmdb -i 172.58.159.211 country iso_code

"GU" <utf8_string>

grep "172.58.0.0" /usr/local/share/GeoIP/*

/usr/local/share/GeoIP/GeoLite2-Country-Blocks-IPv4.csv:172.58.0.0/17,6252001,6252001,,0,0

grep "6252001" /usr/local/share/GeoIP/GeoLite2-Country-Locations-en.csv

6252001,en,NA,"North America",US,"United States",0

So it blocks because country code comes back as GU but it shows as United States.

What am I doing wrong here or is this one in the database incorrect?

Right now I just switched Oceana to match instead of block to make it work again, tmobile was giving me IP's regularly in the 172.58.0.0 range