In computing, geolocation software is software that is capable of deducing the geolocation of a device connected to the Internet. The identification of a device's IP address can be used to determine the country, city, or post/ZIP code, determining an object's geographical location. Other methods include examination of a MAC address, image metadata, or credit card information.
An IP address is assigned to each device (e.g., computer, printer) participating in a computer network that uses the Internet Protocol for communication. The protocol specifies that each IP packet must have a header which contains, among other things, the IP address of the sender of the packet.
There are a number of free and paid subscription geolocation databases, ranging from country level to state or city—including ZIP/post code level—each with varying claims of accuracy (generally higher at the country level). These databases typically contain IP address data which may be used in firewalls, ad servers, routing, mail systems, web sites, and other automated systems where geolocation may be useful. An alternative to hosting and querying a database is to obtain the country code for a given IP address through a DNSBL-style lookup from a remote server.
Some commercial databases have augmented geolocation software with demographic data to enable demographic-type targeting using IP address data.
The primary source for IP address data is the regional Internet registries which allocate and distribute IP addresses amongst organizations located in their respective service regions:
- African Network Information Centre (AfriNIC)
- American Registry for Internet Numbers (ARIN)
- Asia-Pacific Network Information Centre (APNIC)
- Latin American and Caribbean Internet Address Registry (LACNIC)
- RIPE Network Coordination Centre (RIPE NCC)
Secondary sources include:
- Data mining or user-submitted geographic location data. For example, a weather web site might ask visitors for a city name to find their local forecast. Another example would be to pair a user's IP address with the address information in his/her account profile.
- Data contributed by internet service providers.
- Merging databases from different suppliers.
- Guesstimates from adjacent Class C range and/or gleaned from network hops.
- Network routing information collected to the end point of IP address.
Accuracy is improved by:
- Data scrubbing to filter out or identify anomalies.
- Statistical analysis of user submitted data.
- Utilizing third-party tests conducted by reputable organizations.
If geolocation software maps IP addresses associated with an entire county or territory to a particular location (such as the geographic center of the territory), this can cause considerable problems for the people who happen to live there, as law enforcement authorities and others may mistakenly assume any crimes or other misconduct associated with the IP address to originate from that particular location.
For example, a farmstead northeast of Potwin, Kansas became the default site of 600 million IP addresses (due to their lack of fine granularity) when the Massachusetts-based digital mapping company MaxMind changed the putative geographic center of the contiguous United States from 39.8333333,-98.585522 to 38.0000,-97.0000. Similarly, a family in Pretoria, the capital of South Africa, was since 2012 regularly visited by police or angry private citizens who believed their stolen phones were to be found in the family's backyard. This was also the result of geolocation by MaxMind. The company used the National Geospatial-Intelligence Agency's coordinates for Pretoria, which pointed to the family's house, to represent IP addresses associated with Pretoria.
A distinction can be made between co-operative and oppositional geolocation. In some cases, it is in the interest of users to be accurately located, for example, so that they can be offered information relevant to their location. In other cases, users prefer to not disclose their location for privacy or other reasons.
Technical measures for ensuring anonymity, such as proxy servers, can be used to circumvent restrictions imposed by geolocation software. Some sites detect the use of proxies and anonymizers, and may either block service or provide non-localized content in response.
In the UK, the application of the Data Protection Act means that geolocation will only yield the physical address of the ISP. Any further tracking (e.g. for criminal tracing) has to be carried out by getting the ISP to check their logs.
Geolocation technology has been under development only since 1999, and the first patents were granted in 2004. The technology is already widely used in multiple industries, including e-retail, banking, media, telecommunications, education, travel, hospitality, entertainment, health care, online gaming and law enforcement, for preventing online fraud, complying with regulations, managing digital rights and serving targeted marketing content and pricing. Additionally, the U.S. Federal Communications Commission (FCC) has proposed that geolocation software might be leveraged to support 9-1-1 location determination.
An IP address or the related unique URL may also investigated with basic functions, typing from the keyboard two instructions: ping and traceroute. In Unix-like systems, they are available as a command line tool. In the same way, Microsoft Windows has the prompt of DOS working with those instructions.
Banks, software vendors and other online enterprises in the USA and elsewhere became subject to strict "Know your customer" laws imposed by the USA PATRIOT Act, the Bank Secrecy Act, the US Treasury Department's Office of Foreign Assets Control and other regulatory entities in the US and Europe from the early twenty-first century. These laws are intended to prevent money laundering, trafficking with terrorist organizations, and trading with banned nations. When it is possible to identify the true location of online visitors, geolocation can protect banks from participating in the transfer of funds for illicit purposes. More and more prosecuting bodies are bringing cases involving cyber-crimes such as cyber-stalking and identity theft. Prosecutors often have the capability of determining the IP address data necessary to link a suspect to a particular crime.
Online retailers and payment processors use geolocation to detect possible credit card fraud by comparing the user's location to the billing address on the account or the shipping address provided. A mismatch – an order placed from the US on an account number from Tokyo, for example – is a strong indicator of potential fraud. IP address geolocation can be also used in fraud detection to match billing address postal code or area code. Banks can prevent "phishing" attacks, money laundering and other security breaches by determining the user's location as part of the authentication process. Whois databases can also help verify IP addresses and registrants.
Government, law enforcement and corporate security teams use geolocation as an investigatory tool, tracking the Internet routes of online attackers to find the perpetrators and prevent future attacks from the same location.
Since geolocation software can get the information of user location, companies using geomarketing may provide web content or products that are famous or useful in that specific location. Advertisements and content on a website that uses geolocation software in the form of an API (also referred to as "IP API" or "IP address geolocation API") may be tailored to provide the information that a certain user wants.
Internet movie vendors, online broadcasters who serve live streaming video of sporting events, or certain TV and music video sites that are licensed to broadcast their videos of episodes/music videos are permitted to serve viewers only in their licensed territories. By geolocating viewers, they can be certain of obeying licensing regulations. Online gambling websites must also know where their customers violate gambling laws, or risk doing so.
Jim Ramo, chief executive of movie distributor Movielink, said studios were aware of the shortcomings going in and have grown more confident now that the system has been shown to work.
A location-based game is a type of pervasive game for smartphones or other mobile devices in which the gameplay evolves and progresses via a player's real-world location which is typically reported via GPS. Examples of such games include Ingress and Pokémon Go.
- Location-based service
- Locator software
- W3C Geolocation API
- Geolocation Video Software
- Mobile phone tracking
- Holdener, Anthony T. (2011). HTML5 Geolocation. O'Reilly Media. p. 11. ISBN 9781449304720.
- RFC 760, DOD Standard Internet Protocol (January 1980)
- "IP geolocation (The NetOp Organization)". 2009-01-28. Retrieved 2009-02-04.
- An example is the guessed city provided by hostip.info.
- Hill, Kashmir (2016-04-10). "How an internet mapping glitch turned a random Kansas farm into a digital hell". Fusion. Retrieved 2016-04-10.
- Hill, Kashmir (10 January 2019). "How Cartographers for the U.S. Military Inadvertently Created a House of Horrors in South Africa". Gizmodo. Retrieved 10 January 2019.
- "Nitke vs. Ashcroft - Expert report of Seth Finkelstein". 2003-11-10. Retrieved 2004-11-15.
- RealNetworks detects proxies and anonymizers; Google serves non-localized content if location is in doubt. "Geolocation: Don't Fence Web In". Wired. 2004-07-12. Archived from the original on 2006-05-14.
- "Digital Envoy wins Geotargeting Patent". 2004-06-29. Archived from the original on June 17, 2011. Retrieved 2010-04-19.
- ClientSideNews, Nov/Dec 2010 issue, Page 6 “You Can Really Do That? – The Power of Geolocation Technology”
- Marketing Magazine, February 10, 2011 “Thetrainline brings Digital Element on board for localised ad task”
- Music Streaming site we7 Cranks up the Volume for Digital Rights Management and Ad Targeting Archived 2010-12-06 at the Wayback Machine
- "Geolocation and Federalism on the Internet: Cutting Internet Gambling's Gordian Knot". 2009-10-04. SSRN 1433634. Missing or empty
- "FCC Strengthens Enhanced 911 Location Accuracy Requirements for Wireless Services" (PDF). Archived from the original (PDF) on August 11, 2011. Retrieved April 27, 2017.
- "File traceroute-geolocation". Retrieved March 24, 2017.
- Los Angeles Deputy District Attorney, Wendy Segall Hides Evidence.
- Vacca, John R. (2003). Identity Theft. Prentice Hall Professional. p. 400. ISBN 9780130082756.
- Barba, Robert (2017-11-18). "Sharing your location with your bank seems creepy, but it's useful". The Morning Call. Retrieved 2018-01-10.
- Internet Retailer “Personalized web site content gives retailers an edge’, June 25, 2010
- "CinemaNow appeases studios by locating Web surfers". CNet. 2001-02-26. Retrieved 2010-04-22.
- "Geolocation: Don't Fence Web In". Wired News. Associated Press. 2004-07-12. Archived from the original on 2006-09-09. Retrieved 2006-09-28.
- Computers : Software : Internet : Servers : Personalization at Curlie
- Towards Street-Level Client-Independent IP Geolocation: Recent research paper explaining how to find a location from an IP address within 1 km