IP-based access protection

Protected access to IP-protected websites

A Secure DDNS makes sure that websites, admin areas and internal systems protected by IP address can be reached only from the current IP addresses of authorised users – everyone else stays outside.

Secure DDNS

Sign in

12 E-mail address and password

Forgot your password?

Attacks around the world – and our protection

0 protected IP addresses currently on the secure list live data
19 IP addresses currently blocked · so far in total 61 live data
85,9 % known from the IPv4 space: 3 689 983 488 IP addresses whose country we know · 290 989 ranges, 244 countries IP2Location LITE
Green global internet threat level now SANS ISC Infocon
1 781 actively exploited vulnerabilities · +12 in the last 7, +36 in the last 30 days CISA KEV
600 million cyber attacks per day against Microsoft's customers Microsoft Digital Defense Report 2024
7 000 / sec password attacks per second Microsoft Digital Defense Report 2024
311 billion web and API attacks in one year (+33%) Akamai State of the Internet, 2024
47,1 million DDoS attacks in one year – about 129 thousand a day Cloudflare DDoS Threat Report, 2025

Latest IT security news

Cyber threats around the world – by country

Loading map…

DDoS attacks: the number of attacks observed against targets in the given country – NETSCOUT DDoS Threat Intelligence Report, January–June 2026. Attacker IPs: the number of IP addresses from the given country on public international attacker-IP blacklists (blocklist.de, CINS Army, IPsum, GreenSnow, Emerging Threats). Assignment of IP addresses to countries: IP2Location LITE. This shows the location of the attacking machines – often hacked or rented servers – not the nationality of the attackers.

How does it work?

Many websites, admin areas or internal systems can be reached only from specific IP addresses. Users' IP addresses, however, keep changing (home internet, mobile data, travel). Secure DDNS connects the two: it always knows which IP address currently belongs to an authorised user.

Known IP – the visitor may enter
Unknown or banned IP – rejected
  1. Invitation and secure account. The user receives an invitation and sets a password and two-step verification (TOTP).
  2. Reporting the IP address. The app installed on the phone, the Windows client or the router reports the current IP address to the system – manually with one tap, or automatically in the background.
  3. Check on the protected site. The protected website asks for every visitor (by URL or API) whether the given IP address is on the protected list.
  4. Admit or reject. Only a known, valid IP gets a yes. Expired, unknown or banned addresses stay outside; suspicious attempts are banned and logged automatically.

Features

URL-based IP check

A single URL call decides whether an IP is allowed – it can be built into any website, firewall or script.

https://ddns.szoft-tech.hu/?ip=203.0.113.10 → true
API-based IP check

Key-protected JSON API: IP check, querying and managing the active list, with per-key rate limits.

IP validation

IP addresses are also checked against the protected list, the block list, international blacklists and country / VPN / data centre filters.

PWA for mobile devices

An installable app for Android and iPhone that reports the device's current IP address to the system – automatically too when the network changes.

Windows, router and server client

A Windows application running in the background, plus MikroTik, Synology and Linux scripts for updating the IP address automatically.

Two-step verification

Every account is protected by mandatory TOTP; registration is by invitation only.

Automatic banning

Failed sign-ins, too many requests and brute-force attempts result in an automatic IP ban.

Security monitor and alerts

Event log, map-based IP monitor, e-mail notification of new sign-ins and suspicious events.

Expiring IP addresses

IP addresses that are not refreshed drop off the list by themselves, so no forgotten access is left open.

Custom DNS name

The user's current IP address is also available under their own hostname (A / AAAA record) – for firewalls and systems that expect a name instead of an IP address.

WordPress plugin

With a plugin the protected website checks every visitor's IP address without any programming. The API key is bound to the website's domain, which must be verified with a DNS TXT record.

Online ordering and payment

Website protection can be ordered in the interface: payment by bank transfer or mobile banking QR code, in annual periods, with an e-mail notification before expiry.

Hungarian and English interface

The whole interface and the e-mails are available in two languages; visitors from outside Hungary automatically see it in English.

Prices

Website protection
5 000 HUF / month / website
  • URL and API based IP check
  • Invite an unlimited number of users
  • Block list, security monitor, alerts
  • WordPress plugin with an API key bound to the website
  • Annual subscription (12 months in one payment), by bank transfer or QR code
For users
Free
  • Mobile app (PWA) and Windows client
  • Automatic IP update
  • Account protected by two-step verification

The fee is paid by the operator of the protected website, per website. Using the system is free of charge for invited users.

Request a quote: info@szoft-tech.hu

Legal notice

ProviderNémeth Attila EV - Szoft-Tech.hu
Registered officeBudapest, Rumbach Sebestyén utca 6
E-mailinfo@szoft-tech.hu
Phone+36 20 393 5201
Websitehttps://ddns.szoft-tech.hu
Hosting providerWebsupport Magyarország Kft. 1119 Budapest, Fehérvári út 97-99.

We receive questions, comments and complaints about the service at the contact details above.

General Terms and Conditions

1. The provider

ProviderNémeth Attila EV - Szoft-Tech.hu
Registered officeBudapest, Rumbach Sebestyén utca 6
E-mailinfo@szoft-tech.hu
Phone+36 20 393 5201
Websitehttps://ddns.szoft-tech.hu
Hosting providerWebsupport Magyarország Kft. 1119 Budapest, Fehérvári út 97-99.

2. The service

A Secure DDNS An IP address based access protection service. It keeps track of the current IP addresses of authorised users and answers, by URL or API, whether a given IP address is allowed for the protected websites. The service is an additional layer of protection: it does not replace the protected system's own authentication and security settings.

3. The contracting parties, formation of the contract

  • Customer: the operator of the protected website who orders the service. The contract is formed when the provider confirms the order in writing (by e-mail).
  • User: a person invited into the system by the customer or the provider. A user account can be created by invitation only.

4. Fees and payment

The fee of the service per protected website is 5 000 HUF / month, paid by the customer against an invoice by the due date shown on it. Using the system is free of charge for users.

Website protection ordered online is for a 12-month period per website; the fee is payable in advance in one amount (by bank transfer or instant payment QR code), and the period starts when the payment is approved. If the period is terminated or cancelled before expiry, or the website is deleted, the fee paid is not refunded.

5. Obligations of the user

  • Users must keep their sign-in details and the device used for two-step verification confidential and must not hand them over to anyone else.
  • Users may report only the IP address of a network they use themselves.
  • Disrupting the operation of the system, circumventing the protection and accessing other people's data without authorisation are prohibited. In such cases the provider may block access with immediate effect.

6. Availability and liability

The provider strives for continuous operation but accepts no liability for outages caused by maintenance, faults of the hosting or internet provider, or force majeure. The provider is not liable for damage arising from the protected website's own faults or misconfiguration, or from the leak of the user's credentials. Except for intentional breach and breach damaging life, physical integrity or health, the provider's liability is limited to the fee paid for the period concerned.

7. Termination of the contract

Either party may terminate the contract in writing (by e-mail) with effect from the last day of the current month. Users may request the deletion of their account at any time on the profile page or at the provider's e-mail address.

8. Complaints, governing law

Complaints can be submitted at the provider's contact details above; the provider answers them within 30 days. These terms are governed by Hungarian law, in particular Act V of 2013 on the Civil Code and Act CVIII of 2001 on electronic commerce services.

9. Data processing

Personal data processing is covered by the .

Effective: 2 October 2026, until withdrawn. The provider may amend the terms unilaterally and will notify customers of the change by e-mail in advance.

Privacy notice

1. The data controller

ProviderNémeth Attila EV - Szoft-Tech.hu
Registered officeBudapest, Rumbach Sebestyén utca 6
E-mailinfo@szoft-tech.hu
Phone+36 20 393 5201
Websitehttps://ddns.szoft-tech.hu
Hosting providerWebsupport Magyarország Kft. 1119 Budapest, Fehérvári út 97-99.

2. Data processed, purpose, legal basis and duration of processing

DataPurposeLegal basisRetention
Name, e-mail address, password (as a one-way hash only), two-step verification key (encrypted)User account, identification, notificationsPerformance of a contract – GDPR Article 6(1)(b)Until the account is deleted
The user's current IP address, the time and source of the report, the type of device / browserProviding the service: access checks for the protected websitesPerformance of a contract – GDPR Article 6(1)(b)At most 12 hours after the last update
Previously used IP addressesRecognising known addresses, security analysisLegitimate interest – GDPR Article 6(1)(f)At most 12 hours after the last update
Access log: IP address, time, requested page, browser type (for every visitor)Protecting the system, preventing and detecting attacks and abuseLegitimate interest – GDPR Article 6(1)(f)90 days
Security events, bans, the approximate geographic location and provider of the IP addressSecurity alerts, automatic banningLegitimate interest – GDPR Article 6(1)(f)365 days

The system does no profiling and no marketing-related data processing. Automatic banning serves solely to protect the system; a review of a ban can be requested from the provider.

3. Who can access the data?

  • The provider's system administrators.
  • The operators of the protected websites: at their request the system answers whether an IP address is allowed, and provides the current IP address of the authorised user.
  • Data processors: the hosting provider (Websupport Magyarország Kft. 1119 Budapest, Fehérvári út 97-99.) and the mail provider that sends the notification e-mails (Microsoft 365).
  • To determine the geographic location and provider of IP addresses, the system forwards the IP address (without any other data) to the ip-api.com service.
  • To check unknown IP addresses against blacklists, the system forwards the IP address (without any other data) to an external IP reputation service (public DNS blacklists) .

4. Data security

The connection is encrypted (HTTPS); passwords are stored as one-way hashes and two-step verification keys are stored encrypted. Sign-in requires two-step verification and access is logged.

5. Rights of data subjects

Data subjects may request information about their data, its rectification, erasure, restriction of processing and its release in a portable format, and may object to processing based on legitimate interest. Account deletion can also be initiated on the profile page. Requests are received at info@szoft-tech.hu and answered within one month at the latest.

6. Legal remedies

Complaints may be lodged with the Hungarian National Authority for Data Protection and Freedom of Information (1055 Budapest, Falk Miksa utca 9–11., ugyfelszolgalat@naih.hu, www.naih.hu), and data subjects may also turn to the regional court of their place of residence.

Data controller: Németh Attila EV - Szoft-Tech.hu · Effective: 2 October 2026. Governing legislation: Regulation (EU) 2016/679 (GDPR) and Act CXII of 2011 of Hungary (Privacy Act).

Cookie policy

The site uses only cookies strictly necessary for its operation. There are no analytics, advertising or third-party cookies, so no separate consent is required.

NamePurposeLifetime
DDNSSIDSession identifier: the sign-in process and form protection (CSRF)Until the browser is closed
DDNSDEVStaying signed in on the given device (created only after a successful sign-in)At most 365 days

Besides cookies, the browser's local storage holds the state of the interface (e.g. the selected tab), and the installed app stores the static files needed for offline operation. This data is not transmitted.

Cookies can be deleted or blocked in the browser settings, but sign-in does not work without them.