In EvaluateRisk API, below response is received from VIP for IP address ##.##.##.##: The IP address belongs to Spain country but the response shows it is from Denmark which is wrong.
<EvaluateRiskResponse xmlns="https://schemas.symantec.com/vip/2011/04/vipuserservices">
<statusMessage>Authentication failed.</statusMessage>
<Risky>true</Risky>
<RiskScore>0</RiskScore>
<RiskThreshold>50</RiskThreshold>
<RiskReason>Device recognition</RiskReason>
<RequestContext>
<Ip>##.##.##.##</Ip>
<IpLocation>
<Country>denmark</Country>
<State>syddanmark</State>
<City>odense</City>
<Latitude>55.3962</Latitude>
<Longitude>10.3906</Longitude>
</IpLocation>
</RequestContext>
</EvaluateRiskResponse>
VIP Service
Symantec VIP product uses the Neustar vendor IP related data for Geolocation and issue got resolved after updating the VIP service to use the latest IP data.