The IP belongs to a home or business ISP—what does that mean?¶
title: "The IP belongs to a home or business ISP—what does that mean?" card_id: "IP-062" status: "complete" source_document: "https://docs.google.com/document/d/1dnL2Tfm8NQ9wMD8I5tQn8KXXH1FET7uehfJ-P3OTyk0/edit?usp=drivesdk"
The IP belongs to a home or business ISP—what does that mean?¶
The IP belongs to a home or business ISP—what does that mean?¶
An IP lookup shows that an address belongs to a home or business internet provider.
What does that tell you?
It suggests that the address is part of a network used to provide internet connections to customers.
That is different from an address belonging to a VPN service, cloud-hosting company or content-delivery network.
For an ordinary broadband connection, the provider may be able to establish which customer connection was allocated the public IP address at a specified time.
If the address was dynamically assigned, it may have belonged to one customer during the event and a different customer later.
The exact date, time and time zone are therefore essential.
If the provider uses CGNAT, the public address may have been shared by several customers simultaneously. The public source port and protocol may then also be required to identify one translation record.
A successful result will normally identify a subscriber account or customer connection.
For a home service, that may be associated with a residential address and the person who holds the contract.
For a business service, it may identify an office, shop, company network or managed connection used by many people and devices.
The result doesn't normally show which device generated the traffic.
A home router can support family members, visitors and numerous connected devices. A business connection may serve hundreds of employees, customers, servers and automated systems.
The named subscriber isn't necessarily the user. They may simply be the person or organisation responsible for paying for the connection.
The provider’s allocation record also doesn't usually prove that the provider witnessed the activity described by another platform.
It shows that its records associate the supplied connection details with a customer service at that time.
An address appearing to belong to a broadband ISP therefore provides a potentially useful attribution route.
It may take the enquiry from a public IP address to a customer connection or account.
It doesn't, without further evidence, complete the journey from that connection to a device, user or person responsible.