223
votes
While working from home, is it a bad idea to give the company you work for your IP address?
This seems to be a persistent question. IP addresses aren't secrets. Every website you go to must know your IP address. There's no reason to not give away your IP address.
Many companies have ...
- 21.6k
198
votes
DDoS: Why not block originating IP addresses?
Let's say that you run a shop. Every day, you might get a few hundred customers.
One day, you get tens of thousands of people coming in, who get in the check-out line, buys a trinket, and then gets ...
- 1,321
167
votes
Accepted
Is there any actual security benefit to restricting foreign IP addresses?
The concept is "reducing the threat surface". If there is an expectation that no connections will be made from a certain geographic area, then it makes sense to block that area, because, by definition,...
- 126k
162
votes
Accepted
Can someone steal my IP address and use it as their own?
Network engineer with Border Gateway Protocol (BGP) experience here.
Yes. But usually the attack would have to be for a larger address block and (as Eevee commented) require an attacker with ...
- 1,472
116
votes
DDoS: Why not block originating IP addresses?
TL; DR
The multiple source IPs are what makes them so hard to defend against.
For the longer answer we look at the name. DDoS attack. That first D stands for distributed. In other words, there is no ...
- 5,135
112
votes
Accepted
Why is my internal IP address (private) visible from the Internet?
The most likely source of this information is your browser's WebRTC implementation.
You can see this in the source code of ip-api.com.
From https://github.com/diafygi/webrtc-ips, which also provides ...
- 1,155
91
votes
Accepted
Can a hacker, that knows my IP address, remotely access accounts I have left logged in on my computer?
No, they would have to have access to your browser cookies in order to abuse them to log into a site you left logged in. Merely knowing your public IP address would not allow them to log into any ...
- 65.7k
90
votes
Accepted
Why do people use IP address bans when IP addresses often change?
IP address bans have flaws as you mention, but I think the primary reason they are used is simply that there aren't really any better alternatives. Other identifying features, like browser user agent, ...
- 10.3k
89
votes
Accepted
Is it possible to spoof an IP address to an exact number?
You can change your IP to whatever you want; that's trivial. But that will not work the way you want to.
Let's say the store's ISP is Apple Networks, and their IP range is 1.2.3.0 to 1.2.3.255. You ...
- 52k
74
votes
Can someone get my home address if I click on a link to a IP logger?
First: almost every single site out there is an "IP logger". Every server logs at least this information:
IP address of the client
Browser type and version
Operating system
Which site they came from (...
- 52k
73
votes
Accepted
Can I change my public IP address to a specific one?
You can send out a packet with whatever IP address you like.
Then, one of the routers along the way might decide the packet makes no sense (it is a "martian packet") and discard it. Consider ...
- 22.7k
72
votes
What does a website see if I am connected on my native IP and then enable my VPN?
Since you asked specifically what the website will see, rather than any intermediary watching your network connection, we should think in terms of requests:
Your old ("native") IP will disconnect any ...
- 3,790
71
votes
Accepted
How fast can hackers change their IP address?
Botnet
If someone has access to a botnet, even a small one, they could change the IP that their actions are coming from several times per minute or flood their actions from a million IPs in any given ...
- 126k
69
votes
Accepted
More than three domains hosted on the same IP address
This is not a sign of a problem for your server. There's an important detail here, which is:
104.27.182.86 is not your server. That IP belongs to cloudflare.
Cloudflare provides a large number of ...
- 30.4k
63
votes
While working from home, is it a bad idea to give the company you work for your IP address?
Why would a company I am about to do some work (working from home) for, ask for my IP address? What would they need it for? Should I be worried? Thanks
More than likely, they need to be able to white ...
- 22.5k
62
votes
Tracing the location of a mobile IP from an email
The problem with this scenario is that emails are typically not sent from the device itself, but from a central service.
In order to do what you want, the investigators would have to make a few hops:...
- 126k
59
votes
Accepted
Is someone able to hack my Facebook account knowing my Dynamic IP, PPPoE and mask?
Your IP is a public address and has nothing to do with your Facebook account. Just knowing it does not help someone to 'hack' you. In the same way, knowing your IP does not increase your threat of ...
- 126k
59
votes
Accepted
How do hackers find the IP address of devices?
Connecting 'things' to the Internet is becoming common because of the benefits of remote communication. You can have your camera upload its footage to a cloud storage server, or be able to view the ...
- 126k
54
votes
Is it a bad idea to bypass login wall for a specified IP address?
You don't have to worry about spoofing the IP from a different connection, because returned TCP packets would not make it to the attacker in that scenario.
So all you have to worry about is how easy ...
- 13.9k
53
votes
Is it bad to have cameras using a static IP address?
Static or dynamic IP is a non-issue.
But since you brought up cameras, you should know that many IP cameras have VERY poor security. Many of these cameras have a known bad firmware in them that ...
- 21.6k
52
votes
How did the brute-forcers get my IP address so quickly?
An IP address is nothing private. Nowadays it's possible to scan the entire IPv4 Internet within minutes. ZMAP, for example, is a tool that can be used for such scans.
NMAP can be used on IP addresses ...
- 651
49
votes
How does IP address spoofing on the Internet work? Who can do it?
IP Spoofing is NOT IP Hijacking which is causing confusion for anyone reading this. IP Spoofing at its minimum / bare bones explanation is also called impersonation. Let's have an ASCII look at what ...
- 8,672
47
votes
Accepted
Are certificates without DNS fundamentally flawed?
However, in this scheme, couldn't an impostor just present the
certificate after getting it from the real server?
An impostor cannot present, and take advantage of, the real server's certificate ...
- 72.4k
46
votes
Why is my internal IP address (private) visible from the Internet?
A common method to get the internal IP address is by using RTCPeerConnection in JavaScript.
http://ip-api.com/ for example, is calling a javascript function named "gi" that contains the following ...
- 1,104
45
votes
Tracing the location of a mobile IP from an email
If the police have an email, sent by a suspect over a 3G or 4G network, could they use the IP address (since they know when it was sent) to find out - from the service provider - the precise location ...
- 22.5k
42
votes
Accepted
Is it bad to have cameras using a static IP address?
I would consider another contractor, since that statement doesn't precisely increase my trust in his knowledge/skill.
The correct way of setting up a security camera system so you are able to check ...
- 5,211
42
votes
Accepted
Is it practical to pre-blacklist certain GeoIP regions?
It's essentially a business decision, rather than a security one. The risks from a business perspective are that you lose users from that country, or who are accessing the site from VPNs located in ...
- 27.3k
40
votes
Can someone steal my IP address and use it as their own?
If someone manage to get a backdoor program installed on your computer, they can route all their traffic through it using it as a proxy server, thus "stealing" your ip.
All their activity will show ...
- 519
37
votes
Accepted
How to uniquely identify users with the same external IP address?
How to uniquely identify users with the same external IP address?
Is there any way to uniquely identify such users?
Yes, there are lots of ways:
Cookies
Evercookies (JavaScript code that uses lots ...
- 29.1k
Only top scored, non community-wiki answers of a minimum length are eligible