An IP address doesn't identify a person

An IP address doesn't identify a person.

Imagine a cybercrime investigation traces suspicious activity to a public IP address.

Does that identify the criminal?

Not necessarily.

The IP address could belong to:

• A household with multiple users
• An office or public Wi-Fi network
• A VPN provider
• An internet connection shared through Carrier-Grade NAT (CGNAT)
• A compromised computer

3 practical checks for investigators

1. Record exact timestamps: Include the date, time, time zone and source of the logs.
2. Preserve source details: Source ports can be important when multiple subscribers share an IP address.
3. Corroborate attribution: Compare IP records with device evidence, account activity and other relevant logs.

The takeaway: An IP address is an investigative lead, not proof of someone's identity.