I work from home. Why would a company I am about to do some work for ask for my IP address? What would they need it for? Should I be worried? Thanks
This seems to be a persistent question. IP addresses aren't secrets. Every website you go to must know your IP address. There's no reason to not give away your IP address.
Many companies have firewalls that only allow certain addresses through to certain ports. This is a relatively common way of controlling access to resources with minimal effort.
However, most people don't have static IP addresses at home, and your IP address can suddenly change without notice. So just be aware that the IP you have today might not be the IP you have tomorrow.
Why would a company I am about to do some work (working from home) for, ask for my IP address? What would they need it for? Should I be worried? Thanks
More than likely, they need to be able to white list your IP address, or IP range, to allow remote connections from your home. They need to know who's on their network, and why. There's nothing to worry about here.
Keep in mind, they will probably whitelist your dynamic IP range (likely 0-255), and not your actual IP address, unless it's static.
Since you share your IP on every occasion in the web, there is no problem. Usually the reason for this is that they want to whitelist your IP in their firewall to allow you to remotely access them. Apart from that: Giving away your IP can not really harm you.
Even if that one company knows your identity and can consequentially relate your IP to you, this does not imply that any third party can do so. There is no problem in giving someone your IP if that person knew your identity in the first place, no additional information is given.
Other third parties cannot find your name and physical address from your IP address, and you can’t find it from theirs.
Well at last not without help.
We’ve seen that using a whois lookup on an IP address will tell you the ISP that owns it. It’s that ISP that can then tell you who, exactly, that IP address is connected to.
Note that while they can tell you, that doesn’t mean that they will. That information is typically regarded as private and ISPs are not keen on giving it out. What they can and do respond to, however, are court orders.
Firewall whitelisting is the obvious answer, audit whitelisting might be the other.
If we know in advance to expect you to dial in from IPs associated with the northeastern US and all of a sudden we see you're successfully logging in from an IP address range in Guangdong, it's going to raise red flags.
Sounds like a poor man's VPN substitute. Normally the company's VPN should allow connections from anywhere, and then use one or two different authentication methods (or more).
It makes perfectly good sense to firewall off large blocks like China, but micromanaging IP addresses is a continuous administrative overhead.
Plus there are plenty of users who don't have static IP addresses, does your company update the ruleset every time someone blips their router/modem?
Answer No its not dangerous to share your IP, but it may be a sign of poor security practices masked by IP-based Access Lists.
It's a common practice : for restricting an outside access to VPN and other services. You should not worry and use a static IP address - for your own safety, btw. Because if even someone will steal your password - he will not have your IP likely.
Similar to [Alexey Vesnin] answer, we setup an external modem and firewall with an onion VPN connection. We configure the connection to run one specific application with username, password, and security questions. The firewall is configured for a static IP and mac address. If any other user/device tries to connect to that firewall it is kicked off. Employees can run personal internet through their own network card and firewall/router/modem.1
I work for a marketing and advertising agency. My company needs my IP address so that they can track how many times I visit ours, and our clients' websites (which we are monitoring to determine the effectiveness of our marketing and social media campaigns). Since I visit the site frequently to update blogs and edit content, my activities could skew the analytics.
It seems that it was not clearly stated yet in other answers: If you connect to any of your company servers, then they will immediately know your IP anyway (as would any other webserver). Knowing your IP most likely will also allow them to know your physical location (not very precise though).
If you want to hide your location for some reason, then you would need to use a proxy or something, but then again, they might not allow you in.
If you work at home and routinely connect to your company's website then they would have to know your IP since it would be in their logs. Who is doing the asking? Ask them for an explanation. No it is not routine as some have suggested. It may be that someone has been entering into their system to do something harmful and they are checking but, even then, all IPs are logged so it does not make any sense at all. Get an explanation and do not fail to mention that you understand that your IP should automatically appear in their logs so why do they have to ask for it.