IP Geolocation Database Stability and Implications for Network Research

Matthieu Gouel (1, 2) , Kevin Vermeulen (3) , Olivier Fourmaux (1) , Timur Friedman (1, 2) , Robert Beverly (4)

1 NPA - Networks and Performance Analysis
2 LINCS - Laboratory of Information, Network and Communication Sciences
3 Columbia University [New York]
4 NPS - Naval Postgraduate School

IP geolocation has myriad applications. While a body of prior research has investigated the accuracy of geolocation databases, we take a first look at their stability. Using a large collection of snapshots from a popular geolocation database, we examine the longitudinal evolution of its location mappings and address coverage. Across different classes of IP addresses, we find that significant differences can exist even between two successive weekly snapshots - a previously underappreciated source of potential error. To assess the sensitivity of research results to the geo database instance, we examine a prior study [1] that used geolocation. Using their data and methodology, we generate results for each database instance available during their measurement period, i.e., the hypothetical results had the authors used a different snapshot. We show that the median distance of addresses considered shifted over 100km from ground truth and the coverage differed by 30% - potentially impacting the conclusions of this prior study. Based on our findings, we recommend best practices when using geolocation databases for network research to encourage reproducibility and soundness.

Domaines: Réseaux et télécommunications [cs.NI]

Matthieu Gouel, Kevin Vermeulen, Olivier Fourmaux, Timur Friedman, Robert Beverly. IP Geolocation Database Stability and Implications for Network Research. Network Traffic Measurement and Analysis Conference, Sep 2021, Online, United States. ⟨hal-03419874⟩