{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,29]],"date-time":"2026-04-29T08:07:42Z","timestamp":1777450062237,"version":"3.51.4"},"reference-count":34,"publisher":"MDPI AG","issue":"15","license":[{"start":{"date-parts":[[2021,7,22]],"date-time":"2021-07-22T00:00:00Z","timestamp":1626912000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>The paper deals with the locations of IP addresses that were used in the past. This retrospective geolocation suffers from continuous changes in the Internet space and a limited availability of past IP location databases. I analyse the retrospective geolocation of IPv4 and IPv6 addresses over five years. An approach is also introduced to handle missing past IP geolocation databases. The results show that it is safe to retrospectively locate IP addresses by a couple of years, but there are differences between IPv4 and IPv6. The described parametric model of location lifetime allows us to estimate the time when the address location changed in the past. The retrospective geolocation of IP addresses has a broad range of applications, including social studies, system analyses, and security investigations. Two longitudinal use cases with the applied results are discussed. The first deals with geotargeted online content. The second deals with identity theft prevention in e-commerce.<\/jats:p>","DOI":"10.3390\/s21154975","type":"journal-article","created":{"date-parts":[[2021,7,22]],"date-time":"2021-07-22T22:37:14Z","timestamp":1626993434000},"page":"4975","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":4,"title":["Retrospective IP Address Geolocation for Geography-Aware Internet Services"],"prefix":"10.3390","volume":"21","author":[{"given":"Dan","family":"Komosny","sequence":"first","affiliation":[{"name":"Faculty of Electrical Engineering and Communication, Department of Telecommunications, Brno University of Technology, 61600 Brno, Czech Republic"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2021,7,22]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"3","DOI":"10.1111\/tgis.12305","article-title":"A geoprivacy manifesto","volume":"22","author":"McKenzie","year":"2018","journal-title":"Trans. GIS"},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"17606","DOI":"10.1109\/ACCESS.2018.2822260","article-title":"Location Privacy and Its Applications: A Systematic Study","volume":"6","author":"Liu","year":"2018","journal-title":"IEEE Access"},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Zhao, Q., Wang, F., Huang, C., and Yu, C. (November, January 30). Improving IP geolocation databases based on multi-method classification. Proceedings of the 2020 IEEE 14th International Conference on Anti-Counterfeiting, Security, and Identification (ASID), Xiamen, China.","DOI":"10.1109\/ASID50160.2020.9271694"},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Patel, K.B., Moukdad, N., and Anand, S. (2020, January 7\u201311). Geolocation of IP Hosts in Large Computer Networks with Congestion. Proceedings of the ICC 2020\u20142020 IEEE International Conference on Communications, Dublin, Ireland.","DOI":"10.1109\/ICC40277.2020.9149334"},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Guo, C., Liu, Y., Shen, W., Wang, H.J., Yu, Q., and Zhang, Y. (2009, January 19\u201325). Mining the Web and the Internet for Accurate IP Address Geolocations. Proceedings of the IEEE International Conference on Computer Communications 2009, Rio de Janeiro, Brazil.","DOI":"10.1109\/INFCOM.2009.5062243"},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Sousa, A., Costa, A., Santos, A., Meneses, F., and Nicolau, M.J. (2014, January 27\u201330). Using DNS to establish a Localization Service. Proceedings of the International Conference on Indoor Positioning and Indoor Navigation 2014, Busan, Korea.","DOI":"10.1109\/IPIN.2014.7275506"},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Scheitle, Q., Gasser, O., Sattler, P., and Carle, G. (2017, January 21\u201323). HLOC: Hints-based geolocation leveraging multiple measurement frameworks. Proceedings of the 2017 Network Traffic Measurement and Analysis Conference (TMA), Dublin, Ireland.","DOI":"10.23919\/TMA.2017.8002903"},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"568","DOI":"10.1177\/0894439318781022","article-title":"Willingness of the Public to Share Geolocation Information in a U.S. Census Bureau Survey","volume":"37","author":"Nichols","year":"2019","journal-title":"Soc. Sci. Comput. Rev."},{"key":"ref_9","unstructured":"Komosny, D. (2021, March 24). Historical IP Geolocation Data. Available online: gitlab.com\/komosny\/historical-ip-address-geolocation."},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Gharaibeh, M., Shah, A., Huffaker, B., Zhang, H., Ensafi, R., and Papadopoulos, C. (2017, January 1\u20133). A look at router geolocation in public and commercial databases. Proceedings of the Proceedings of the 2017 Internet Measurement Conference, London, UK.","DOI":"10.1145\/3131365.3131380"},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"3","DOI":"10.1145\/3402413.3402415","article-title":"RIPE IPmap active geolocation: Mechanism and performance evaluation","volume":"50","author":"Du","year":"2020","journal-title":"ACM SIGCOMM Comput. Commun. Rev."},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Padmanabhan, R., Dhamdhere, A., Aben, E., Claffy, K., and Spring, N. (2016, January 14\u201316). Reasons Dynamic Addresses Change. Proceedings of the 2016 Internet Measurement Conference, Santa Monica, CA, USA.","DOI":"10.1145\/2987443.2987461"},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"500","DOI":"10.1109\/TIFS.2019.2924555","article-title":"Predictability of IP Address Allocations for Cloud Computing Platforms","volume":"15","author":"Almohri","year":"2020","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Lewis, J.L., Tambaliuc, G.F., Narman, H., and Yoo, W.-S. (2020, January 17\u201320). IP Reputation Analysis of Public Databases and Machine Learning Techniques. Proceedings of the 2020 International Conference on Computing, Networking and Communications (ICNC), Big Island, HI, USA.","DOI":"10.1109\/ICNC47757.2020.9049760"},{"key":"ref_15","first-page":"1","article-title":"Server Location Verification Augmenting (SLV) and Server Location Pinning: TLS Authentication","volume":"21","author":"Abdou","year":"2017","journal-title":"ACM Trans. Priv. Secur. (TOPS)"},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Gulati, A., Dubey, P., MdFuzail, C., Norman, J., and Mangayarkarasi, R. (2017, January 14\u201317). Credit card fraud detection using neural network and geolocation. Proceedings of the IOP Conference Series: Materials Science and Engineering, Sibiu, Romania.","DOI":"10.1088\/1757-899X\/263\/4\/042039"},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"1338","DOI":"10.1109\/JSYST.2015.2389518","article-title":"Using Geolocation for the Strategic Preincident Preparation of an IT Forensics Analysis","volume":"10","author":"Koch","year":"2016","journal-title":"IEEE Syst. J."},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"48816","DOI":"10.1109\/ACCESS.2019.2909691","article-title":"Using RIPE Atlas for Geolocating IP Infrastructure","volume":"7","author":"Candela","year":"2019","journal-title":"IEEE Access"},{"key":"ref_19","unstructured":"RIPE Atlas Archive (2021, March 24). RIPE NCC. Available online: ftp.ripe.net\/ripe\/atlas\/probes\/archive\/."},{"key":"ref_20","unstructured":"RPM Find (2021, March 24). Daniel Veillard. Available online: www.rpmfind.net."},{"key":"ref_21","unstructured":"Wayback Machine (2021, March 24). Internet Archive. Available online: archive.org\/web\/."},{"key":"ref_22","unstructured":"Sood, G. (2021, April 29). Maxmind IP Geolocation Archival Data. Harvard Dataverse. Available online: dataverse.harvard.edu\/dataset.xhtml?persistentId=doi:10.7910\/DVN\/RMZOEN."},{"key":"ref_23","unstructured":"Oschwald, G., Rolsky, D., and Zentner, B. (2021, March 24). MaxMind DB File Format Specification. Database Metadata. Available online: maxmind.github.io\/MaxMind-DB\/."},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"766","DOI":"10.1093\/biostatistics\/kxt019","article-title":"Stochastic EM algorithm for doubly interval-censored data","volume":"14","author":"Dejardin","year":"2013","journal-title":"Biostatistics"},{"key":"ref_25","unstructured":"Giolo, S. (2004). Turnbull\u2019s Nonparametric Estimator for Interval-Censored Data, Department of Statistics, Federal University of Parana. Technical Report."},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"274","DOI":"10.4103\/0974-7788.76794","article-title":"Understanding survival analysis: Kaplan-Meier estimate","volume":"1","author":"Kishore","year":"2010","journal-title":"Int. J. Ayurveda Res."},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"1317","DOI":"10.21105\/joss.01317","article-title":"Lifelines: Survival analysis in Python","volume":"4","year":"2019","journal-title":"J. Open Source Softw."},{"key":"ref_28","unstructured":"Cowgill, B., and Dorobantu, C. (2021, March 04). Competition and Specificity in Market Design: Evidence from Geotargeted Advertising. Available online: papers.ssrn.com\/sol3\/papers.cfm?abstract_id=3267053."},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"28","DOI":"10.1016\/j.dss.2018.12.004","article-title":"Enhancing geotargeting with temporal targeting, behavioral targeting and promotion for comprehensive contextual targeting","volume":"117","author":"Lian","year":"2019","journal-title":"Decis. Support Syst."},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Cho, Y., and Lee, S. (2016, January 15\u201317). Detection and Response of Identity Theft within a Company Utilizing Location Information. Proceedings of the International Conference on Platform Technology and Service (PlatCon), Jeju, Korea.","DOI":"10.1109\/PlatCon.2016.7456790"},{"key":"ref_31","unstructured":"Buchhop, P. (2013). Use of Velocity in Fraud Detection or Prevention. (US20130110715A1), U.S. Patent."},{"key":"ref_32","doi-asserted-by":"crossref","first-page":"168","DOI":"10.1109\/TNSM.2016.2544402","article-title":"Assessing the Implications of Cellular Network Performance on Mobile Content Access","volume":"13","author":"Kaup","year":"2016","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Livadariu, I., Dreibholz, T., Al-Selwi, A.S., Bryhni, H., Lysne, O., Bj\u00f8rnstad, S., and Elmokashfi, A. (2020, January 27\u201330). On the Accuracy of Country-Level IP Geolocation. Proceedings of the Applied Networking Research Workshop, Virtual Event, Spain.","DOI":"10.1145\/3404868.3406664"},{"key":"ref_34","unstructured":"RIPE Atlas Docs Centre (2021, April 27). RIPE NCC. Available online: beta-docs.atlas.ripe.net."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/21\/15\/4975\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T06:33:10Z","timestamp":1760164390000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/21\/15\/4975"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,7,22]]},"references-count":34,"journal-issue":{"issue":"15","published-online":{"date-parts":[[2021,8]]}},"alternative-id":["s21154975"],"URL":"https:\/\/doi.org\/10.3390\/s21154975","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,7,22]]}}}