19

There were many ways to detect the user's IP, for instance we could get it through a single click link or through any other medium of communication where we could get the user's IP.

But the tedious part is finding the real geo-location of the IP address.

Whenever I check I am able to only retrieve the information that is associated with where the ISP is located and not the exact location of the computer with that IP address.

Some options I looked over for detecting location were:

  • If it's a public IP, we could trace it, or further explore with maltego

  • Some IP's were publicly listed with Google map records with exact physical location

Is there any way to determine the real address through the IP other than the ISP's address?

  • 3
    This question is assuming that IP's are in any way related to their geographic location. – schroeder Dec 24 '15 at 5:00
  • 5
    simple answer: no – schroeder Dec 24 '15 at 5:10
  • 1
    How would the ISP know? – schroeder Dec 24 '15 at 5:14
  • 1
    Even that isn't guaranteed. A properly configured Tor browser will obscure location to everyone with the possible exception of the NSA. There are VPN's that (claim that they) don't keep logs. – Neil Smithline Dec 24 '15 at 5:15
  • 1
    Could you ask the user? – Prinsig Dec 24 '15 at 11:27
12

Geo-ip location accuracy varies wildly from country to country and from provider to provider. Some smaller countries have very accurate internal mappings of IP's to postal addresses but this type of data is generally not available to the public.

Note: Different Geo-IP address databases may also have different location data for the same IP address so you may also want to double-check the quality of your source data.

Alternative ways to gain more accurate information:

Methods people/organizations use to get more accurate geo-ip information include the following:

1.) HTML5 Geolocation especially if the remote device is a mobile device with GPS or GPS like triangulation features this may give you much more accurate info than the Geo-IP address. If the device does not use GPS it may alternatively leverage the local wireless SSID information and compare that other datasets to determine it's physical location, Google and Skyhook wireless have large databases of end user SSID's mapped to physical locations. Note: If you can get the SSID there are other public databases of where SSID's have been seen mapped to physical locations.

http://www.w3schools.com/html/html5_geolocation.asp

http://locationdetection.mobi/

2.) Purchase information about the IP address from advertisers who can confirm the owners shipping location via aggregation based on other activity notably past sales & shipping information. Matching aggregate regular and hidden cookie information to the account owner to help identify the person or people who use a given IP is far more telling than GeoIP information.

3.) See if you can match the IPv4 address to an IPv6 address on the same host. In many cases the IPv4 geolocation may not be as accurate or up-to-date as the IPv6 geolocation information for the same host.

There are likely many other ways to do this.

It may also be helpful to read some of the FAQ's at commercial providers of GeoIP data such as Maxmind to give you an idea of how accurate the data may be.

https://support.maxmind.com/

Finally it should be noted that some elements of this information such as HTML5 geolocation and unique cookies may be sent to the web server allowing someone to identify a user that may otherwise be trying to disguise their address via a proxy or a service like Tor. This is one of the specific reasons Tor users need to be careful about their implementation and how they are using the service.

  • This is scary stuff. – Hashim Aug 29 '17 at 0:21
  • wow, amazing explaination – Arsal Imam May 9 '18 at 1:43

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.