WAF Advanced Configuration > Countries to block basis

Hi,

I am currently blocking access outside of authorized countries on a per VS basis.

I recently ran into an issue where it appears different services are reporting the IP as coming from different countries. In this particular case, ARIN.net is reporting the IP with an entity in country A, yet a lookup of the IP on https://www.iplocation.net/ shows it sourced from country B, based on multiple references.

We have country B allowed in the WAF Advanced Configuration and it's not getting through. However, this has worked for other IP's which ARIN reports as the allowed country.

So my question is what is the basis for the GEO IP Database?