Link to home
Start Free TrialLog in
Avatar of Pau Lo
Pau Lo

asked on

tools to forge geo-location of IP address.

How simple is it for a malicious technically minded user to essentially 'forge' the IP address they used to submit a form on a company’s website, to show their geo-location as somewhere specific, even though they may be using an Internet connection elsewhere, even in a different country? What tools would they use so the IP in the logs for the form submission specifically looks like the user was based in a specific area, e.g. city. And how technically is that achieved?  e.g. user in city B, uses a technique that shows the submission of a web form as an IP address based in city X.


Secondly, what other factors could affect the geo-location of the IP address shown in the logs, so it shows a location different to where the user was based when they submitted the form? 


Thirdly, how accurate are the free "where is my IP location" tools online, or can someone recommend the most accurate way of associating an IP with a physical location? 

ASKER CERTIFIED SOLUTION
Avatar of Craig Beck
Craig Beck
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Pau Lo
Pau Lo

ASKER

With VPN though can you be specific where in the world you want your IP address to appear to be? Or is it just randomly generated each session?
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Pau Lo

ASKER

Most reputable VPN solutions allow you to set the server location.

What is the use case for such a feature out of interest, I can understand a user wanting to keep your location anonymous, but why would someone specifically want to show their location, for arguments sake in London, if they were actually based in Glasgow?

I wasnt entirely sure what the various "where is my IP location" sites are using to pinpoint a geo-location, a quick test of my own public IP (not behind a VPN) is inaccurate.
Netflix/HBO or any other stream services have different content depending on different locations (licensing issues).
So if you know series x is definitely on Netflix and you can't see it, you'll have it solved in 3 seconds with an VPN solution, and no solution if you don't have a VPN.
VPN's are also useful for seeing what people in other places see on your website.  Especially if you are detecting locations and supplying different content based on that.
Geolocation data on IP's is highly volatile these days as address ranges travel from  ISP -> ISP -> ISP due to lack of addresses.
If someone start now want to start a new ISP there is a Steep hill to climb for reputable addresses.