topic Re: Plusnet Username publicly visible via IP Locators in Everything else

Plusnet Username publicly visible via IP Locators

DdAaNn — Sat, 17 Dec 2022 22:02:11 GMT

Hi,

Hoping someone can provide some assistance/feedback here.

I've recently become aware that my (and I presume your) account username is publicly viewable to anyone who knows your IP address. Pretty concerning when your username is your full name as is my case...

For example, if you head over to ip-tracker.org your username is completely visible on the 'Host Address' field as USERNAME@plus.com.

Obviously this is a pretty big security/privacy issue, I can't even find anyway to change my username so it is not my full name.

Does anyone have any experience with this or how we can fix it? I saw a similar thread which recommended this link, however it just leads to a generic support page.

EDIT: As far as I am aware I am on a dynamic IP (I don't pay for a static IP anyway). I've tested this externally as well to make sure it is not only visible when viewing from within my PlusNet account.

Thanks

Re: Plusnet Username publicly visible via IP Locators

jab1 — Sat, 17 Dec 2022 21:57:52 GMT

AFAIK those on dynamic addresses are not exposed, and if you wish to change if you are on a fixed IP - by choice - a request posted on here will get picked up and actioned.

Re: Plusnet Username publicly visible via IP Locators

DdAaNn — Sat, 17 Dec 2022 22:00:12 GMT

Thanks for your feedback.

As far as I am aware I am on a dynamic IP - I certainly do not pay for a static IP anyway.

If someone is able to pick this up and remove my personal details that would be great.

Re: Plusnet Username publicly visible via IP Locators

jab1 — Sat, 17 Dec 2022 22:05:50 GMT

Unfortunately, I am no longer a Plusnet customer, but from memory when I was, those on dynamic addresses were definitely not identified by user name - it was something like 'your IP-dyndns.something generic', but I can't remember. Maybe a Community member who is a PN customer can advise.

Re: Plusnet Username publicly visible via IP Locators

DdAaNn — Sat, 17 Dec 2022 22:07:35 GMT

Thanks John, appreciate your assistance.

Seems something has definitely changed because I am on a dynamic IP and my username is definitely visible. Seems like a strange way for PN to have this set up really.

Re: Plusnet Username publicly visible via IP Locators

jab1 — Sat, 17 Dec 2022 22:10:33 GMT

I'll tag a couple of the Super users for advice, but it may not get picked up until tomorrow - if we are lucky.

@Townman / @MisterW ?

Re: Plusnet Username publicly visible via IP Locators

RPMozley — Sat, 17 Dec 2022 22:16:12 GMT

How long have you been with PlusNet?
I ask because legacy accounts usually have fixed IP for free. Also there is no monthly fee for fixed, it’s a one off charge.

Re: Plusnet Username publicly visible via IP Locators

jab1 — Sat, 17 Dec 2022 22:18:11 GMT

Cheers, @RPMozley . Did you get a fixed IP by default? I joined about 10 years ago and was always on a dynamic.

Re: Plusnet Username publicly visible via IP Locators

Anonymous — Sat, 17 Dec 2022 22:19:04 GMT

@DdAaNn

I have just tried the link that you gave in your first post.

I don't see any reference to "Host Address", or my Plusnet Username.

What I do see though is a field named "Hostname", which has an IP address beginning 141 and ending with .dyn.plus.net

That 141.xxx.xxx.xx IP address is not the one showing currently on my router, which is begins 80.xxx.xxx.xxx

I do not have a static IP address.

Re: Plusnet Username publicly visible via IP Locators

jab1 — Sat, 17 Dec 2022 22:21:04 GMT

Cheers to you too, @Anonymous - that's what I had all the years I was a PN customer.

Re: Plusnet Username publicly visible via IP Locators

RPMozley — Sat, 17 Dec 2022 22:26:31 GMT

@jab1 It might have been default, can’t remember exactly if I had to switch it on or not, it was many years ago.

Re: Plusnet Username publicly visible via IP Locators

DdAaNn — Sat, 17 Dec 2022 22:28:52 GMT

Thanks for the feedback guys.

@RPMozley I think this must be the case for me then, I've been with PN for a long time (I'd guess maybe 10years or more) so it must be grandfathered in on my account.

@Mr_Paul This is what I see, obviously I blanked my Username and IP out in this case.

@jab1 Thanks again for all your help/feedback with this.

Hopefully someone with the power at Plusnet can help/fix this.

Re: Plusnet Username publicly visible via IP Locators

Baldrick1 — Sat, 17 Dec 2022 22:59:23 GMT

@DdAaNn

You. must have been given a fixed IP address at some time. If you don’t want one the easy solution is simply to ask for this to be changed to dynamic.

Moderators Note

This topic has been moved from Broadband to Everything Else

Re: Plusnet Username publicly visible via IP Locators

DdAaNn — Sat, 17 Dec 2022 23:05:35 GMT

Hi @Baldrick1,

Thanks.

I'm not actually against having a static IP, I just didn't know I had one. I could actually make use of a static IP now I know its available.

I am against my username (and therefore full name) tied to my IP in a public space though - is there a way to remove the username whilst keeping the static IP?

Thanks

Re: Plusnet Username publicly visible via IP Locators

Townman — Sun, 18 Dec 2022 00:28:45 GMT

From inspecting my referrals I think I can be confident in stating that only static IP address accounts are resolvable as account.plus.com

By default the rDNS of a static IP address is the same as the URL which resolves to the address … which is usually a desirable security confirmation characteristic. The issue then arises where someone has used clearly personally identifiable information as their account name … they think that the security affirmation characteristic of rDNS is in itself a security concern.

Account names cannot be changed, however the rDNS of a fixed IP address can be changed - usually to ip-address.plus.com

A request here for that to be changed is usually picked up by the staff.

Re: Plusnet Username publicly visible via IP Locators

DdAaNn — Sun, 18 Dec 2022 00:35:57 GMT

Hi @Townman,

Thanks for your feedback, that's useful information to know. Will the relevant staff pick up the request from this comment/thread or so I need to make a more official request?

Thanks again

Re: Plusnet Username publicly visible via IP Locators

Townman — Sun, 18 Dec 2022 01:48:09 GMT

I am sure that this thread will be sufficient to garner assistance from a staff member...

Re: Plusnet Username publicly visible via IP Locators

seebee — Sun, 18 Dec 2022 10:17:44 GMT

I thought that if you were on a dynamic IP, but had turned on the Broadband Firewall in the Plusnet portal that would happen to give you a reverse IP name of username.plus.com

The Plusnet Broadband Firewall is controlled here - Broadband Firewall | Member Centre | Plusnet

I have mine set to off, and don't have time to test it this morning, so have a reverse address like x.x.x.x.dyn.plus.net - I'm sure in the past when I have turned it on, I then get a reverse of username.plus.com

Its mentioned here by @Gandalf - Re: Help with user name, account name. - Page 2 - Plusnet Community

"...To clarify the bit about the static IP you do have one we've automatically added free of charge, because the broadband firewall is activated. We'd automatically apply a static IP if you enable the broadband firewall, ..."

Re: Plusnet Username publicly visible via IP Locators

jab1 — Sun, 18 Dec 2022 10:21:23 GMT

@seebee Now you mention it... Never had the BB firewall on, so that's why I always had a dynamic IP. Presumably it had to be static for the firewall to work?

Re: Plusnet Username publicly visible via IP Locators

MisterW — Sun, 18 Dec 2022 10:25:58 GMT

Yes, I believe if you turn on the firewall you will get allocated a static ip

It's to do with routing changes to allow the firewall, to work