How could websites block IP address?

[a cooperator]

Hi,

I don't know if I would find help here or not. But all what I want to get is to be enlightened about how some websites would block an IP address after some log in attempts? If they've blocked IP address of my ISP, then all accounts from my country would be blocked? Or they make a specific website be blocked for a specific ip address.

I was received this email message notification after 3 failed log in attempts to some website.

We have detected 3 failed log in attempts to your account from Yemen.

If this wasn't you, someone else may be trying to access your account. These log in attempts were unsuccessful and we have blocked the IP address from further attempts so no action is required. You may however want to change your password for greater security, especially if you use the same password on other websites.
If this was you, you can safely ignore this email and you will be able to sign in again at 09/28/2017 01:35 PM.

 

[Gam3r01]

It only blocked your unique IP for the next day, you can try again tomorrow.
Additionally, it probably didnt block your IP, its blocking attempts from your IP.

 

[USAFRet]

When you connect to a "website", or other server, it know what your public IP address is.
That public IP address is generally that of your router. It must know this, so that it knows where to send the data back to.

How does it know Yemen? Because your ISP purchases a whole crapload of IP addresses. As does mine, and every other ISP.
IP lookup is trivial.

If, for instance, your normal access is from Kansas, and all of a sudden there are 3 failed attempts from Yemen...."hmm....I'm thinking something is wrong. Let me block that and tell the user."

 

[bill001g]

MERGED QUESTION
Question from a cooperator : "How could websites block IP address?"

Hi,

I don't know if I would find help here or not. But all what I want to get is to be enlightened about how some websites would block an IP address after some log in attempts? If they've blocked IP address of my ISP, then all accounts from my country would be blocked? Or they make a specific website be blocked for a specific ip address.

I was received this email message notification after 3 failed log in attempts to some website.

We have detected 3 failed log in attempts to your account from Yemen.

If this wasn't you, someone else may be trying to access your account. These log in attempts were unsuccessful and we have blocked the IP address from further attempts so no action is required. You may however want to change your password for greater security, especially if you use the same password on other websites.
If this was you, you can safely ignore this email and you will be able to sign in again at 09/28/2017 01:35 PM.

It only blocks that one web site for that particular IP address. they can not really block all web sites it would be your ISP that could do that. They can only place blocks on the servers they control.

It is not very effective and can cause lots of issues if the IP addresses are shared. Things like cell phone data generally use shared ip addresses that change so it does not really block the person and it may block people who are just using the same site. It really depends on what the site is. Something like facebook that is used by a lot of people would cause massive issues. Site say like this one is not accessed by as many people.

A lot of companies have figured out that this can actually allow a attacker to do more damage than just preventing the access. A person that knows it works this way can intentionally attempt to block as many IP addresses as they possibly can. The site will in effect block itself from many of its users who did nothing wrong at all.

You find this problem on vpn sites all the time where you get unlucky and hit a ip that is blocked for some site. You just drop the vpn and get another so it is a pretty much a waste of time.

 

[a cooperator]

When you connect to a "website", or other server, it know what your public IP address is.
That public IP address is generally that of your router. It must know this, so that it knows where to send the data back to.

How does it know Yemen? Because your ISP purchases a whole crapload of IP addresses. As does mine, and every other ISP.
IP lookup is trivial.

If, for instance, your normal access is from Kansas, and all of a sudden there are 3 failed attempts from Yemen...."hmm....I'm thinking something is wrong. Let me block that and tell the user."

Thanks a lot,

First of all: could you please move this thread of mine to the suitable forum which is "Networking"?

Secondly: Yes, my ISP purchases a whole crapload of IP addresses. Thus, you think I am blocked with my specific public IP address which is generally that of my router. If so, Never have I really ever seen any public IP address, nor have I recognised where I can find it.

Thirdly: do you think the one highlighted in the screen shot below is my Public IP address. However, I always see that my Public IP address is being assigned another IP address for each new connection session to PPPoE
When opening the site, whatismyipaddress, it also gave me the same Public IP address.



Finally: While setting up a VPN profile on my Android cellphone(LT-M5 Lite mobile), I was asked to type in 'Name', and 'Server address'(screen shot below). Thus, I am stumbled about what I can type in those fields.
I tried typing my my IDSS (Network Name) in the "name" field, and typed in 'my public IP address' in 'Server address' field. Then clicked 'save'. However, when trying to clicking on that VPN profile created, then I was asked to type in 'Username" and "Password".(screen shot below)
NOTE: I configured my router using PPPoE Address Acquisition which has the same username and Password given by my ISP. Thus, when asked to username and password while setting up the VPN on my android cellphone, I tried typing the same username and Password used to configure my connection to PPPoE on my router.


However, the connection to my VPN profile didn't succeed.


<Images removed due to exposure of a public IP address>

 

[USAFRet]

You got an email, due to 3 or more failed logins from the same IP address, which happens to probably be from Yemen.

The next time you log into your PPOE router, you may or may not get a different public IP address.

 

[a cooperator]

You got an email, due to 3 or more failed logins from the same IP address, which happens to probably be from Yemen.

The next time you log into your PPOE router, you may or may not get a different public IP address.

Thanks a lot, USAFRet,
Could you please go back to my same previous post and read it again since I have made some updates to it since your last seen.

 

[USAFRet]

You got an email, due to 3 or more failed logins from the same IP address, which happens to probably be from Yemen.

The next time you log into your PPOE router, you may or may not get a different public IP address.

Thanks a lot, USAFRet,
Could you please go back to my same previous post and read it again since I have made some updates to it since your last seen.

I have no idea what is going on with your VPN thing.

 

[a cooperator]

Thanks a lot,
But at least could you please let me know the following:
1- Why did Images get removed due to exposure of a public IP address? What is the issue of exposure for my public IP address?
2- You think that I only was blocked with my specific IP address assigned to my PPPoE, and not all person located in Yemen were blocked as well?

3- For my VPN, could you at least let me know what I can type in 'Server address' and 'name' fields. I tried typing my my IDSS (Network Name) in the "name" field, and typed in 'my public IP address' in 'Server address' field. Then clicked 'save. But, it was successful. You think 'sever address' is the same 'public IP address'?

 

[USAFRet]

Thanks a lot,
But at least could you please let me know the following:
1- Why did Images get removed due to exposure of a public IP address? What is the issue of exposure for my public IP address?
2- You think that I only was blocked with my specific IP address assigned to my PPPoE, and not all person located in Yemen were blocked as well?

3- For my VPN, could you at least let me know what I can type in 'Server name' and 'name' fields. I tried typing my my IDSS (Network Name) in the "name" field, and typed in 'my public IP address' in 'Server address' field. Then clicked 'save. But, it was successful.

1. I personally removed those images.
Having your public IP address visible invites all sorts of scam attacks.

2. Yes, just your specific IP address. Not the entire country

3. No idea.