Tracing an IP from a mobile broadband ISP

Question

My honeypot caught a hack attempt from an IP that was issued by Three Mobile Broadband (UK).

My immediate thought was that most probable explanation was that the user was in the UK and had his laptop hooked up to a cell data stick. But it got me thinking:

Would it be possible for the user to be in Romania, use a cellular phone or data stick from a UK provider, and get an IP from the UK? Or, would the user have to be in the UK to get an IP from the UK provider?

I do not know things like:

• when does an IP address get assigned to a cellular Internet connection? As soon as it hits the local data network, or does it complete a cellular data network routing before it hits Internet?
• are cell-to-cell connections possible on data networks? Like a VPN, but over GSM.
• what options are there for a hacker to use cellular data networks to anonymize his traffic?

Answer 1

After reading a study about this (Geolocating IP Addresses in Cellular Data Networks), it looks like most of the cellular companies will assign a private IP address to your device, even though there are some which assign public IP addresses. Having a private IP address, means that you are behind a NAT owned by the provider, which is actually your gateway to the Internet. This gateway, not only that it can be (physically) in another country or even continent, but also sometimes the geolocalization will point it differently compared to its current location, due to administrative reasons.

For the anonymization of the data network, most probably using a VPN (most smartphones have this feature) is the way to go... as long as your VPN is anonymous (depending on your provider - no logs kept, etc).

Answer 2

when does an IP address get assigned to a cellular Internet connection? As soon as it hits the local data network, or does it complete a cellular data network routing before it hits Internet? 

They use a pool of addresses technical details of how their network is outside of the scope of this question( in other words every mobile provider would be different ).

are cell-to-cell connections possible on data networks? Like a VPN, but over GSM. 

My Motorola Droid phone supports VPN applications.

what options are there for a hacker to use cellular data networks to anonymize his traffic?

There are lots of options again a specfic list would be outside of the scope of your question. Furthermore this is likely the case of somebody using their cell phone and tethering it to a more typical electronic device.

In the US I have been assigned an ip address registered to my provider, and looking at the Geo Location information for said address, it was 2 states away from where I live.