>varying based on source IP,

Aha, that's what you would think, but what if I fake the source of the IP used to do the geolocation ping instead!