User IP Address Can Change in One Day - How to Ban by IP?

Idea
1

I am wanting to create a banned users list based on a person’s IP address and email address. I ran a test this morning by creating a test user account, and collecting the IP address (from my computer), adding them to the banned users list, but then I ran another test this afternoon by creating another test user account with a different email but from the same computer and ran it against the banned users list, but it passed and was able to proceed with creating the account. Turns out that somehow the IP changed between this morning and this afternoon. Is this normal?

If my IP can change in one day, then checking a person’s IP during sign up against a list of banned IPs won’t work.

Are there any other workarounds I can identify banned users by?

2

It’s common it’s called a dynamic IP very common.

You need to combo a few methods like
cookie drop and detect + IP

Depending on your app types there may be more effective methods to countering a bad actor.

3

What’s the reason for banning them? Are they actual humans? If not captcha will help. If they are then what @chris.williamson1996 said plus, most importantly, device fingerprints.

There are also APIs for determining types of users and don’t forget to parse email addresses for gmail to get root address and compare with banned emails

1 Like