Hot answers tagged

223 votes

While working from home, is it a bad idea to give the company you work for your IP address?

This seems to be a persistent question. IP addresses aren't secrets. Every website you go to must know your IP address. There's no reason to not give away your IP address. Many companies have ...
user avatar
  • 21.5k
198 votes

DDoS: Why not block originating IP addresses?

Let's say that you run a shop. Every day, you might get a few hundred customers. One day, you get tens of thousands of people coming in, who get in the check-out line, buys a trinket, and then gets ...
user avatar
  • 1,321
167 votes
Accepted

Is there any actual security benefit to restricting foreign IP addresses?

The concept is "reducing the threat surface". If there is an expectation that no connections will be made from a certain geographic area, then it makes sense to block that area, because, by definition,...
user avatar
  • 123k
161 votes
Accepted

Can someone steal my IP address and use it as their own?

Network engineer with Border Gateway Protocol (BGP) experience here. Yes. But usually the attack would have to be for a larger address block and (as Eevee commented) require an attacker with ...
user avatar
  • 1,462
116 votes

DDoS: Why not block originating IP addresses?

TL; DR The multiple source IPs are what makes them so hard to defend against. For the longer answer we look at the name. DDoS attack. That first D stands for distributed. In other words, there is no ...
user avatar
  • 5,095
112 votes
Accepted

Why is my internal IP address (private) visible from the Internet?

The most likely source of this information is your browser's WebRTC implementation. You can see this in the source code of ip-api.com. From https://github.com/diafygi/webrtc-ips, which also provides ...
user avatar
104 votes

How to get MAC address via IP

If you are on the same network you can open up a Terminal: ping your_ip_address hit Ctrl-C on the keyboard to stop pinging then do a: arp -a a list should appear, look for the ip you just pinged ...
user avatar
  • 1,215
91 votes
Accepted

Can a hacker, that knows my IP address, remotely access accounts I have left logged in on my computer?

No, they would have to have access to your browser cookies in order to abuse them to log into a site you left logged in. Merely knowing your public IP address would not allow them to log into any ...
user avatar
  • 63.8k
89 votes
Accepted

Why do people use IP address bans when IP addresses often change?

IP address bans have flaws as you mention, but I think the primary reason they are used is simply that there aren't really any better alternatives. Other identifying features, like browser user agent, ...
user avatar
  • 10.2k
86 votes
Accepted

Is it possible to spoof an IP address to an exact number?

You can change your IP to whatever you want; that's trivial. But that will not work the way you want to. Let's say the store's ISP is Apple Networks, and their IP range is 1.2.3.0 to 1.2.3.255. You ...
user avatar
  • 50.3k
73 votes

Can someone get my home address if I click on a link to a IP logger?

First: almost every single site out there is an "IP logger". Every server logs at least this information: IP address of the client Browser type and version Operating system Which site they came from (...
user avatar
  • 50.3k
73 votes
Accepted

Can I change my public IP address to a specific one?

You can send out a packet with whatever IP address you like. Then, one of the routers along the way might decide the packet makes no sense (it is a "martian packet") and discard it. Consider ...
user avatar
  • 22.5k
72 votes

What does a website see if I am connected on my native IP and then enable my VPN?

Since you asked specifically what the website will see, rather than any intermediary watching your network connection, we should think in terms of requests: Your old ("native") IP will disconnect any ...
user avatar
  • 3,772
71 votes
Accepted

How fast can hackers change their IP address?

Botnet If someone has access to a botnet, even a small one, they could change the IP that their actions are coming from several times per minute or flood their actions from a million IPs in any given ...
user avatar
  • 123k
69 votes

How do you stop a hacker when their IP address is 0.0.0.0?

I suspect that your Wordfence plug-in is blindly trusting the X-Forwarded-For header. This header is used by proxies to indicate the IP address of the computers sending traffic trough them, but can ...
user avatar
  • 2,768
69 votes
Accepted

More than three domains hosted on the same IP address

This is not a sign of a problem for your server. There's an important detail here, which is: 104.27.182.86 is not your server. That IP belongs to cloudflare. Cloudflare provides a large number of ...
user avatar
68 votes
Accepted

Is it good practice to ban an IP address if too many login attempts are made from it?

The answer to this question very much depends on the security posture of your site, which decides whether the risk of unauthorised access is greater or lower than the risk of Denial of Service for ...
user avatar
  • 60.7k
63 votes

While working from home, is it a bad idea to give the company you work for your IP address?

Why would a company I am about to do some work (working from home) for, ask for my IP address? What would they need it for? Should I be worried? Thanks More than likely, they need to be able to white ...
user avatar
  • 22.5k
62 votes

Tracing the location of a mobile IP from an email

The problem with this scenario is that emails are typically not sent from the device itself, but from a central service. In order to do what you want, the investigators would have to make a few hops:...
user avatar
  • 123k
60 votes
Accepted

Differences between using Tor browser and VPN

TL;DR Tor provides anonymous web browsing but does not provide security. VPN Services provides security (sort of) and anonymity, but the anonymity might be more in question depending on the service. ...
user avatar
  • 12.3k
59 votes
Accepted

Is someone able to hack my Facebook account knowing my Dynamic IP, PPPoE and mask?

Your IP is a public address and has nothing to do with your Facebook account. Just knowing it does not help someone to 'hack' you. In the same way, knowing your IP does not increase your threat of ...
user avatar
  • 123k
59 votes
Accepted

How do hackers find the IP address of devices?

Connecting 'things' to the Internet is becoming common because of the benefits of remote communication. You can have your camera upload its footage to a cloud storage server, or be able to view the ...
user avatar
  • 123k
54 votes

Is it a bad idea to bypass login wall for a specified IP address?

You don't have to worry about spoofing the IP from a different connection, because returned TCP packets would not make it to the attacker in that scenario. So all you have to worry about is how easy ...
user avatar
  • 13.8k
53 votes

Is it bad to have cameras using a static IP address?

Static or dynamic IP is a non-issue. But since you brought up cameras, you should know that many IP cameras have VERY poor security. Many of these cameras have a known bad firmware in them that ...
user avatar
  • 21.5k
52 votes

How did the brute-forcers get my IP address so quickly?

An IP address is nothing private. Nowadays it's possible to scan the entire IPv4 Internet within minutes. ZMAP, for example, is a tool that can be used for such scans. NMAP can be used on IP addresses ...
user avatar
  • 651
49 votes

How does IP address spoofing on the Internet work? Who can do it?

IP Spoofing is NOT IP Hijacking which is causing confusion for anyone reading this. IP Spoofing at its minimum / bare bones explanation is also called impersonation. Let's have an ASCII look at what ...
user avatar
  • 8,674
47 votes
Accepted

Are certificates without DNS fundamentally flawed?

However, in this scheme, couldn't an impostor just present the certificate after getting it from the real server? An impostor cannot present, and take advantage of, the real server's certificate ...
user avatar
  • 71.7k
46 votes

Why is my internal IP address (private) visible from the Internet?

A common method to get the internal IP address is by using RTCPeerConnection in JavaScript. http://ip-api.com/ for example, is calling a javascript function named "gi" that contains the following ...
user avatar
  • 1,104
45 votes

Tracing the location of a mobile IP from an email

If the police have an email, sent by a suspect over a 3G or 4G network, could they use the IP address (since they know when it was sent) to find out - from the service provider - the precise location ...
user avatar
  • 22.5k

Only top scored, non community-wiki answers of a minimum length are eligible