Sign inMonitor a domain
Privacy

Someone has my IP address: what can they do, and should I worry?

Every site you visit already sees your IP. The risks worth acting on are few and specific, and each has a simple response.

By peekip editorialLast checked 5 Oct 20262 min read4 sources
On this page
Short answer

With your IP someone can see your ISP and a rough area, try to overload your connection (a denial-of-service attack, mostly a gaming problem), or probe for services you exposed to the internet. They cannot read your traffic or see your street. Close port forwards you don’t need, keep your router updated, and if you are flooded, call your ISP and ask for a new address.

Your IP is not a secret

Your public IP address is sent to every website, game server and app you connect to; that is how replies reach you. Knowing it is not the same as getting into your network. What someone can learn from it is public: the registry record names your ISP and its contacts,[1] and databases estimate a general area, which even Google treats as general rather than precise.[2]

The realistic risks

RiskHow likelyWhat to do
They learn your ISP and cityCertain, and harmless on its ownNothing; every site you visit sees the same
They flood your connection (DoS/DDoS)Mostly after arguments in online games or streamsContact your ISP; ask for a new address
They probe for services you openedOnly matters if you forwarded ports or run a serverClose forwards you don’t use; update the device behind them
They combine it with other data about youDepends on what else they haveTreat it like any personal data: don’t post it with your name

CISA defines a denial-of-service attack as one where legitimate users are unable to use a network or service “due to the actions of a malicious cyber threat actor”, and a distributed one as many machines attacking one target.[3] For a home connection it means your internet stops working until the flood ends.

GDPR counts IP addresses among online identifiers because, combined with other information, they can be used to profile and identify people.[4] That is the reason to avoid posting your IP alongside your name, not a reason to panic about the IP alone.

If your connection is being flooded

  1. Confirm it. Your connection drops repeatedly, often right after an argument in a game, while the line itself tests fine.
  2. Call your ISP. CISA’s advice for suspected attacks is to contact your network administrator and your ISP, who can see the traffic and filter it.[3]
  3. Ask for a new public address. Some ISPs change it on a router restart; others do it on request.
  4. Stop sharing it. Use a game’s or platform’s relayed voice chat instead of peer-to-peer where you can.
Run it on yours

See what your IP shows

Check what public sources say about your address, and what they don’t.

Open the Truth Check

Easy hardening, once

  • Remove port forwards and UPnP mappings you don’t recognise.
  • Update your router’s firmware and change its default admin password.
  • Keep remote-access features off unless you use them.

None of these depend on keeping your IP secret, which you can’t do anyway. They work because they shrink what is reachable at that address.

Sources

  1. RFC 9083: JSON Responses for the Registration Data Access Protocol (Jun 2021) · IETF / RFC EditorChecked 5 Oct 2026
  2. How Google uses location information · Google Privacy & TermsChecked 5 Oct 2026
  3. Understanding Denial-of-Service Attacks · CISAChecked 5 Oct 2026
  4. GDPR Recital 30: Online identifiers for profiling and identification · gdpr-info.euChecked 5 Oct 2026