IP Change Detection: A Record Monitoring
Get alerted immediately when your domain's IP changes, planned or not.
An IP change in your DNS records can be legitimate (server migration, new provider) or malicious (DNS hijacking). In both cases, being informed immediately is crucial. An undetected change means your traffic is redirected without your knowledge, potentially to a server cloning your site to steal credentials. Continuous monitoring of your A/AAAA records is a fundamental security measure.
Signs of IP Change
- dig returns a different IP than expected
- SSL alerts because certificate doesn't match server
- Server logs showing sudden absence of traffic
- Users reporting suspicious site behavior
Why IP Can Change
- Legitimate migration: You or your team changed the server and updated DNS.
- DNS account compromise: An attacker has access to your DNS panel and modified the record.
- Configuration error: Someone mistakenly modified the wrong record or domain.
Verification and Response
- Check current IP: dig +short example.com
- Compare with documentation: what IP should be configured?
- Review DNS provider logs to see who made the change.
- If unauthorized: revert immediately, change credentials, investigate.
IP Monitoring with MoniTao
MoniTao monitors your IPs continuously:
- Instant alert when an A/AAAA record changes value
- Change history for audit and forensics
- Verification from multiple locations to detect inconsistencies
Securing Your DNS IPs
- Document expected IP for each critical record
- Enable change notifications in your DNS panel
- Use MoniTao for independent monitoring
- Limit DNS panel access to strict necessity
FAQ - IP Change
How long before a change is visible?
Change is immediate at authoritative server level. Propagation to caches depends on TTL.
Can I be alerted BEFORE the change?
Not at DNS level. But you can configure login alerts on your DNS panel.
How to prove hijacking?
DNS provider logs, change history, and public DNS archives serve as evidence.
Does IP change affect SSL?
Certificate remains valid (it's tied to domain) but must be installed on new server.
Useful Links
Ready to Sleep Soundly?
Start free, no credit card required.