A comprehensive guide to understanding IP addresses, how they work, IPv4 vs IPv6, and why they matter for online security.
An IP address (Internet Protocol address) is a unique numerical label assigned to every device connected to a computer network. It performs two essential functions: identifying the network interface of a host, and providing its location within the network so that data packets can be routed correctly. Without IP addresses, the internet as we know it simply could not exist.
When you load a website, stream a video, or send an email, every data packet that travels across the internet carries both a source IP address and a destination IP address β the digital equivalent of a postal system's return address and delivery address.
IPv4 (Internet Protocol version 4) uses 32-bit addresses expressed as four decimal numbers separated by dots, such as 203.0.113.45. Each number ranges from 0 to 255, giving a theoretical maximum of approximately 4.3 billion unique addresses. When the standard was drafted in the early 1980s, that number seemed inexhaustible. The explosive proliferation of smartphones, IoT devices, and cloud infrastructure has long since exhausted the free pool of IPv4 addresses β the last unallocated blocks were distributed to regional registries between 2011 and 2015.
IPv4 addresses are still the dominant form on the internet today, with exhaustion managed through techniques like Network Address Translation (NAT), which allows many devices to share a single public IP.
IPv6 uses 128-bit addresses written in eight groups of four hexadecimal digits separated by colons, such as 2001:0db8:85a3:0000:0000:8a2e:0370:7334. Leading zeros within a group can be omitted, and one consecutive sequence of all-zero groups can be compressed to ::, making the example above 2001:db8:85a3::8a2e:370:7334.
The IPv6 address space is astronomically larger β 2128 addresses, approximately 340 undecillion. Even if every person on Earth owned a trillion devices, there would still be addresses to spare. IPv6 adoption has been growing steadily, with major ISPs and mobile networks now assigning IPv6 addresses as a matter of course.
Not all IP addresses are reachable from the public internet. The Internet Assigned Numbers Authority (IANA) has reserved certain ranges for private use within local networks:
10.0.0.0 β 10.255.255.255 (10.0.0.0/8) β commonly used in large enterprise networks172.16.0.0 β 172.31.255.255 (172.16.0.0/12) β often used in medium-sized networks192.168.0.0 β 192.168.255.255 (192.168.0.0/16) β the most familiar range, used in home routersDevices on your home network have private IPs (like 192.168.1.5) assigned by your router. Your router has a single public IP assigned by your ISP. When you access the internet, your router performs Network Address Translation (NAT), rewriting the source address on outgoing packets so the destination server sees the router's public IP rather than your device's private IP.
ISPs assign IP addresses in two ways. A static IP is permanently assigned to a customer β it never changes between sessions. Static IPs cost more and are primarily used by businesses that need to run publicly reachable servers, configure remote access, or maintain consistent identity for security allow-listing.
A dynamic IP is drawn from a pool managed by the ISP using DHCP (Dynamic Host Configuration Protocol). Each time you connect, you may receive a different IP from the pool. Most residential customers have dynamic IPs. From a security standpoint, dynamic IPs make it harder to block or track an individual user long-term, since the address changes β though the ISP retains logs mapping IP to customer at any given time.
Beyond private ranges, several other special ranges exist:
127.0.0.0/8 β Loopback. 127.0.0.1 (localhost) always refers to the local machine itself.169.254.0.0/16 β Link-local. Assigned automatically when DHCP fails; not routable beyond the local network segment.100.64.0.0/10 β Carrier-Grade NAT (CGNAT). Used by ISPs to share a single public IP among hundreds of residential customers.0.0.0.0 β Represents an unspecified or unknown address; used in routing contexts.255.255.255.255 β Limited broadcast address; packets sent here reach all hosts on the local network.The global IP address space is managed hierarchically. The Internet Assigned Numbers Authority (IANA) allocates large blocks to five Regional Internet Registries (RIRs): ARIN (North America), RIPE NCC (Europe and Middle East), APNIC (Asia-Pacific), LACNIC (Latin America), and AFRINIC (Africa). RIRs then allocate smaller blocks to ISPs and large organisations, who in turn assign individual addresses to their customers and servers.
Your public IP address is visible to every server you connect to. It reveals your approximate geographic location, your ISP, and your connection type. Security systems use this information extensively:
Understanding your IP address β what it reveals, how it's assigned, and how it influences your online experience β is the foundation for everything else in network security and privacy.
Need proxy detection, VPN detection, or abuse scoring in your own application?