Retrospective IP Address Geolocation for Geography-Aware Internet Services

Abstract

The paper deals with the locations of IP addresses that were used in the past. This retrospective geolocation suffers from continuous changes in the Internet space and a limited availability of past IP location databases. I analyse the retrospective geolocation of IPv4 and IPv6 addresses over five years. An approach is also introduced to handle missing past IP geolocation databases. The results show that it is safe to retrospectively locate IP addresses by a couple of years, but there are differences between IPv4 and IPv6. The described parametric model of location lifetime allows us to estimate the time when the address location changed in the past. The retrospective geolocation of IP addresses has a broad range of applications, including social studies, system analyses, and security investigations. Two longitudinal use cases with the applied results are discussed. The first deals with geotargeted online content. The second deals with identity theft prevention in e-commerce.

Spam filter based on geographical location of the sender

“…The sensitivity (2) says that true spam is marked as a spam with the given probability, which implies that a large amount of spam is not intercepted. The precision (3) indicates that the probability of correctly marking a message is relatively high. And the accuracy (4) indicates what proportion of messages are classified correctly.…”

“…In [3], author investigated a retrospective IP address geolocation. Approach referred to as late location means locating an IP address in the past by a current geolocation database.…”

“…Geolocation is also involved in a cybersecurity and detection systems. Sometimes a two-factor authentication may be enforced when a user attempts to perform some action from an unusual location, [3].…”