In EvaluateRisk API, below response is received from VIP for IP address ##.##.##.##: The IP address belongs to Spain country but the response shows it is from Denmark which is wrong.
<EvaluateRiskResponse xmlns="https://schemas.symantec.com/vip/2011/04/vipuserservices"> <statusMessage>Authentication failed.</statusMessage> <Risky>true</Risky> <RiskScore>0</RiskScore> <RiskThreshold>50</RiskThreshold> <RiskReason>Device recognition</RiskReason> <RequestContext> <Ip>##.##.##.##</Ip> <IpLocation> <Country>denmark</Country> <State>syddanmark</State> <City>odense</City> <Latitude>55.3962</Latitude> <Longitude>10.3906</Longitude> </IpLocation> </RequestContext> </EvaluateRiskResponse>VIP Service
Symantec VIP product uses the Neustar vendor IP related data for Geolocation and issue got resolved after updating the VIP service to use the latest IP data.