Editing IP address blocking

{{Short description|Access restrictions based on IP address}}
{{for|information about blocking IP addresses on Wikipedia|Wikipedia:Blocking IP addresses}}
{{Use American English|date=June 2023}}

'''IP address blocking''' or '''IP banning''' is a configuration of a [[network service]] that blocks requests from [[Host (network)|hosts]] with certain [[IP address]]es. IP address blocking is commonly used to protect against [[brute force attack]]s and to prevent access by a disruptive address. It can also be used to restrict access to or from a particular geographic area; for example, syndicating content to a specific region through the use of [[Internet geolocation]].<ref>{{citation |title=The John Marshall Journal of Computer & Information Law |url=https://books.google.com/books?id=jlcuAQAAIAAJ |year=2003 |publisher=Center for Computer/Law}}{{Page needed|date=January 2023}}</ref>

IP address blocking can be implemented with a [[hosts file]] (e.g., for Mac, Windows, Android, or OS X) or with a [[TCP wrapper]] (for [[Unix-like]] operating systems). It can be bypassed using methods such as [[proxy server]]s; however, ''this'' can be circumvented with [[DHCP lease]] renewal.

==How it works==
Every device connected to the Internet is assigned a unique [[IP address]], which is needed to enable devices to communicate with each other. With appropriate software on the host website, the IP address of visitors to the site can be logged and can also be used to determine the visitor's [[geolocation|geographical location]].<ref>{{Cite web |url=https://computer.howstuffworks.com/internet/basics/what-is-an-ip-address.htm |title=What is an IP address?|date=2001-01-12|website=HowStuffWorks|language=en|access-date=2019-12-13}}</ref><ref>{{Cite web|url=https://privacy.net/stop-cookies-tracking/ |title=How cookies track you around the web & how to stop them|date=2018-02-24| website=Privacy.net|language=en|access-date=2019-12-13}}</ref>

Logging the IP address can, for example, monitor if a person has visited the site before, for example, to vote more than once, as well as to monitor their viewing pattern, how long since they performed any activity on the site (and set a time out limit), besides other things.

Knowing the visitor's [[geo-location|geolocation]] indicates, besides other things, the visitor's country. In some cases, requests from or responses to a certain country would be blocked entirely. [[Geo-blocking]] has been used, for example, to block shows in certain countries, such as [[Internet censorship|censoring]] shows deemed inappropriate. This is especially frequent in places such as [[Censorship in China|China]].<ref name=":0">{{Cite web|title=What Is Geo-Blocking and How to Bypass It|url=https://www.avast.com/c-geoblocking|access-date=2021-10-12|website=Avast|archive-url=https://web.archive.org/web/20230103233641/https://www.avast.com/c-geoblocking|archive-date=2023-01-03|url-status=live|language=en}}</ref><ref>{{Cite web|title=Media Censorship in China|url=https://www.cfr.org/backgrounder/media-censorship-china|access-date=2021-10-12|website=Council on Foreign Relations|language=en}}</ref>

Internet users may circumvent geo-blocking and censorship and protect their personal identity using a [[Virtual Private Network]].<ref name=":0" />

On a website, an IP address block can prevent a disruptive address from access, though a warning and/or account block may be used first. Dynamic allocation of IP addresses by [[ISP]]s can complicate IP address blocking by making it difficult to block a specific user without blocking many IP addresses (blocks of IP address ranges), thereby creating collateral damage.<ref>{{Cite web|last=Groome|first=Patrick|title=[Community] The Trouble with IP Bans|url=https://blog.vanillaforums.com/product/the-trouble-with-ip-bans|access-date=2021-10-12|website=blog.vanillaforums.com|language=en-us|archive-date=2022-07-13|archive-url=https://web.archive.org/web/20220713184736/https://blog.vanillaforums.com/product/the-trouble-with-ip-bans|url-status=dead}}</ref> For websites with low-enough popularity (often intentionally, with explicitly declaring the majority of potential visitors as out-of-scope) the large-scale collateral damage is often tolerable: most of website accesses, for addresses belong to the same IP range, are accesses of persons just having a dynamic IP address, but the same [[Internet service provider]] (ISP), country, city and city districts, based on which IP ranges are assigned by ISPs. On websites with low-enough total visitor count, it is improbable that all these features match more than a single person. For large websites, [[Terms of Service|Terms of Services]] usually reserve the right of their admins to block access at own discretion, enabling them to create collateral damage this way.

==Implementations==
[[Unix-like]] operating systems commonly implement IP address blocking using a [[TCP wrapper]], configured by host access control files ''/etc/hosts.deny'' and ''/etc/hosts.allow''.

Both companies and schools offering remote user access use [[Linux]] programs such as [[DenyHosts]] or [[Fail2ban]] for protection from unauthorized access while allowing permitted remote access. This is also useful for allowing remote access to computers. It is also used for Internet censorship.

IP address blocking is possible on many systems using a [[Hosts (file)#Blocking|hosts file]], which is a simple text file containing hostnames and IP addresses. Hosts files are used by many operating systems, including Microsoft Windows, Linux, Android, and OS X.

==Circumvention==
[[File:FSB to MTS Letter about Protonmail IP Blocking 12 T 3 1-94 2019-02-25 (page 1).jpg|thumb|A letter from the Russian [[Federal Security Service]] (FSB) about IP blocking of [[ProtonMail]]{{Relevance inline|date=January 2022}}]]
[[Proxy server]]s and other methods{{Which|date=January 2023}} can be used to bypass the blocking of traffic from IP addresses.<ref>{{cite web|title=How to: Circumvent Online Censorship|url=https://ssd.eff.org/en/module/how-circumvent-online-censorship|url-status=dead|archive-url=https://web.archive.org/web/20181223084444/https://ssd.eff.org/en/module/how-circumvent-online-censorship|archive-date=2018-12-23|website=ssd.eff.org}}</ref> However, anti-proxy strategies are available. Consumer-grade internet routers can sometimes obtain a new public IP address on-demand from the ISP using [[DHCP lease]] renewal to circumvent individual IP address blocks. This, however, can be countered by blocking the range of IP addresses from which the internet service provider is assigning new IP addresses, which is usually a shared [[IP address prefix]]. However, this may impact legitimate users from the same internet service provider who have IP addresses in the same range, which inadvertently creates a [[denial-of-service attack]].

In the case ''[[Craigslist v. 3Taps]]'' (2013), US federal judge [[Charles R. Breyer]] held that circumventing an address block to access a website is a violation of the [[Computer Fraud and Abuse Act]] for "unauthorized access", and is thus punishable by [[civil damages]].

==See also==
*[[Block (Internet)]]
*[[Content-control software]]

==References==
{{reflist}}

==External links==
{{commons category-inline|IP address blocking}}

{{DEFAULTSORT:Ip Blocking}}
[[Category:Internet security]]
[[Category:Blacklisting]]