A numeric label used to identify a device’s network connection. In investigations, IP addresses can support geolocation estimates and link activity to an ISP subscriber at a specific time, but NAT, VPNs, proxies, and shared networks can complicate attribution.
