The Internet Protocol (IP) is the main protocol for sending packets accross the internet. It belongs to the internet layer in the internet protocol suite with the variants IPv4 and IPv6.

learn more… | top users | synonyms

29
votes
3answers
5k views

How does IP address spoofing on the Internet work? Who can do it?

Someone recently told me that the NSA could impersonate pretty much anyone they want by using IP address spoofing on the Internet. But how would that work and to what extend is it true anyway? Could ...
0
votes
1answer
40 views

How to find a spoofed packet with matching TTL?

To detect spoofed packets, TTL is recorded and it if does not match, its declared spoofed. Is there any technique to find an IP address whose TTL to the target is same as your TTL to the target ? I ...
1
vote
0answers
11 views

Why is the maximum port range 65535 in the TCP/IP Suite ? [migrated]

My doubt is that - a port is just logical, so why such restriction ? Why can't I have a port of 9924593 or something like that ?
0
votes
1answer
42 views

What prevents ISPs from tracking chain of proxies' (or Tor relays') IP addresses?

I searched all over the internet for the answer for my simple question, but couldn't find anything useful. I already know that police have to access PCs used as proxies or Tor relay nodes to read ...
3
votes
1answer
51 views

Security implications of WAF revealing internal IP addresses

What are the security implications of a web app firewall/load balancer revealing internal IPs of the web sites behind it to the outside world? A specific example is with F5 products: They use a ...
0
votes
0answers
6 views

Change local IP address programmatically? [migrated]

I have a local network in my home with my ADSL(Router) modem. We can change our IP with the following setting in Windows Is it possible do it programmatically, e.g. using C#.Net?
2
votes
1answer
54 views

Is it a good practice to forbid ip access to port 80?

I see some sites have blocked there port 80 (or 443) to be accessed by IP. When you access by IP, An Nginx forbidden page shows up (with there OS version). My question is does it affect any side of ...
1
vote
0answers
8 views

How do I use Client9's IPCat with IPTables [migrated]

I'd like to block all ips of all datacenters in the world with this list: https://github.com/client9/ipcat But I don't know how to use that list, I'd like a bash script that checks if there's an ...
0
votes
0answers
3 views

Android UID 0 Process Time_Wait for 103.235.16.156 [migrated]

I ran my netstat App and found a UID 0 process connection to 103.235.16.156. Looks like it's coming from Hong Kong. I'm running CM 12.1-20150909 for HTC M8, so it is a custom ROM with root. I'm ...
7
votes
7answers
658 views

Does Windows 10 leak information about your IP address?

There are various reports of Windows 10 automatically sending out data when the user opens the start menu. Can that information or other information that Windows 10 automatically sends out to the ...
0
votes
1answer
31 views

Why is calculating the checksum of an IP Datagram header and then encrypting it not appropriate to provide Data Origin Authentication?

So assuming Alice and Bob have agreed to use a particular symmetric cryptosystem and share an appropriate key, they want to achieve data origin authentication by computing the header checksum of an IP ...
0
votes
0answers
12 views

What range of IP addresses is represented by the CIDR block 172.16.0.0/12? [migrated]

A solution I was given for this question... *THE CIDR block includes all addresses of the form 1010 1010 0001 **** **** **** **** **** (where * may be 0 or 1). Thus this block represents the IP ...
1
vote
2answers
50 views

AS number look up [closed]

I have a list of thousands of urls, for each host in these URLs I want to get their AS "Autonomous System" number. What is the best way to do that automatically? I have seen some websites that ...
1
vote
1answer
32 views

Multiple users sharing the same IP

I'm setting up a quite unusual proxy for a very specific niche case. I'm allocating (ip,port) addresses to users, from which they can send and receive UDP and TCP packets. e.g. say someone is ...
9
votes
4answers
178 views

How to design a home network for IoT devices?

I'm trying to work out how best to design a home network which contains (potentially hostile) devices. I'm running into my limits of networking knowledge! I have two challenges. Unsecure Devices ...
9
votes
2answers
287 views

Sophisticated DDOS attack

According to this article, ProtonMail was the victim of a very sophisticated DDOS attack. "At 2pm there was a dramatic escalation," said Yen. According to Yen and Gargula the attackers smacked 15 ...
-6
votes
1answer
57 views

Can an ip be forced to connect? If so, how is it done, and how can I prevent it? [closed]

Can an IP be forced to receive data from another IP (specifically IPv6 for both)? If so how does this work, and how can I prevent this from happening to me? Does that have any way to be broken? If so ...
2
votes
0answers
29 views

What are the security risks of using public address schemes for the DHCP of your VPN'd Users?

At the company I work for we recently purchased a network scanning tool to help with asset inventory and overall PC network management. My supervisor, while looking at the different IP address ranges ...
3
votes
1answer
40 views

Does using the same mail and web server increase a risk of DDos due to IP exposure?

I use the same server for sending my emails and web hosting. I send user registration and support forum mails from my server and occasional marketing mails or newsletters. I read on a CloudFlare blog ...
2
votes
4answers
117 views

Is it possible to fake incoming IP?

I would like to whitelist an IP address on my smtp server so that non-authenticated emails on connections originating from that IP could be routed. I control that other IP, so I can make sure that ...
4
votes
2answers
93 views

Exposing IP address via img tags

As we all know, many forums allow users to set profile pictures, post images, or put images in signatures. Could a user create an img tag that points to their own site with a link that no one would ...
-5
votes
1answer
34 views

Can the ip of a SMB file share be traced back to me? [closed]

The question is pretty much self explanitory
2
votes
1answer
109 views

T-Mobile WWAN IP address is DoD Network Information Center? [closed]

I wrote an app that grabs the IP address of my Wifi as well as the WWAN i.e. the data part of my Tmobile plan. I have an iPhone. Here is what my app prints. I use pretty standard code to obtain the ...
1
vote
0answers
19 views

Moving Target Defense implementation in context of SDN

I need to demonstrate MTD for a project in context of SDN by writing logic for the SDN controller. The logic could be as simple as creating a new Virtual IP every n seconds. However, i would like some ...
1
vote
2answers
77 views

public databases of IP addresses which are involved in illegal/gray-area activities

I just received a /24 IPv4 network from my ISP. This very same /24 network was previously used by some hosting provider and if I made a quick scan of those 256 IPv4 addresses agains some DNSBL ...
-4
votes
1answer
64 views

Is it possible to Use someone public IP? [closed]

I am quite aware of the networking. But I have a confusion which I am searching over internet but did not come to any solution. Can we assign any specific IP to our PC or any device. Like I want to ...
1
vote
2answers
110 views

Why did I get a wrong IP and certificate for www.facebook.com just now? [closed]

I just navigated to www.facebook.com and my browser alerted me that an invalid certificate has been received. I checked the cert in question, and I was surprised to see that the Common Name on it was ...
6
votes
2answers
138 views

Malicious user inflicting XSS attacks appears to be on my own network

I have a live Django project where I'm using nginx as a reverse proxy with gunicorn as the application server. It's a fairly new project and isn't SSL enabled yet. There's a user on this project who's ...
0
votes
1answer
94 views

How restrict is an Asp .Net Web App with ipSecurity enabled?

The IT department of my company refused to host an ASP .Net Web App on our intranet. For security reasons that would be the best solution. Right now I'm considering other options. One of those is to ...
6
votes
4answers
208 views

How to identify a company's public network address range?

Which tools or websites can I use to identify a company's public network address range(s)?
1
vote
1answer
84 views

How does add-on for the Firefox with a custom proxy server prevents info from Google?

I would like to know how does add-on for the Firefox web browser with a custom proxy server prevent Google from collecting information about your browsing? Does it prevent also from your internet ...
-5
votes
1answer
102 views

The problem I have with wikipedia showing IP addresses to the world? [closed]

I went on wikipedia, then went to the edit history of an articles I edited. To my surprise, my IP address, along with other people's IP addresses are on the articles edit history page. Why would ...
37
votes
10answers
12k views

While working from home, is it a bad idea to give the company you work for your IP address?

I work from home. Why would a company I am about to do some work for ask for my IP address? What would they need it for? Should I be worried? Thanks
2
votes
1answer
111 views

Linux responds to ARP requests for other interfaces - could this be a security vulnerability?

Linux responds to ARP requests on all interfaces by default. To explain, say you have this setup: Client 1 ---> [eth1] server [eth0] <--- Client 2 And the server's eth1 IP is 192.168.1.1 and ...
1
vote
3answers
225 views

How can I find an unauthorized/unknown proxy on my home network?

I recently started receiving an error while trying to stream netflix that I'm using a proxy. Exactly this error code here: https://help.netflix.com/en/node/277?ba=GSButtonClick&q= My problem is ...
1
vote
1answer
29 views

IPSec Host-to-Host VPN (RedHat) needs IP Forwarding?

We would like to build a Host-to-Host IPSec VPN (both RedHat Linux). Is it really mandatory to activate IP Forwarding, which is by default deactivated because of our security policy (/etc/sysctl.conf ...
1
vote
3answers
279 views

How to (further) ensure SSH security?

I set up my Linux Ubuntu machine as an SSH server through no-ip.com and it works great. Recently I discovered the command, sudo lastb -ad -F -w which outputs a log of the most recent failed SSH ...
0
votes
2answers
143 views

Beginner > Medium > Advanced Books/Guides/Tutorials on TCP/IP [closed]

Long time web developer looking to get into infosec. Was hoping on guidance on material from a beginners stance on TCP/IP and hopefully "networks". I realise the massive generalisation I'm making but ...
3
votes
1answer
71 views

What other attacks can be deployed using IP spoofing other than DoS(and DDoS) attacks ?

I want to know the other attacks which are associated with IP spoofing because, we're trying to implement Source Address Validation (SAVA) and wanted to where else can Source Address validation ...
-3
votes
1answer
70 views

IP Address Is A Guid-Like String [closed]

When I get my IP address from Google, in most cases, it's a number like NNN.NNN.NNN.NNN (sometimes fewer than 3 Ns). It always is in that format. I noticed on this new wifi that my IP address is a ...
12
votes
2answers
226 views

How was The Pirate Bay datacenter kept hidden?

How were The Pirate Bay's servers kept hidden for so long? You would think that it would be easy finding the servers that so many DNS servers are pointing to. Tracing the chain to the main datacenter ...
5
votes
2answers
406 views

Port forwarding with 0.0.0.0, any threat?

I set up on our company's firewall (fortigate100d) a port forwarding to one of our Internal services. As we don't have a static public IP I used 0.0.0.0 as an external IP so the remote users can ...
11
votes
1answer
556 views

How can I detect real location of the user through their IP address?

There were many ways to detect the user's IP, for instance we could get it through a single click link or through any other medium of communication where we could get the user's IP. But the tedious ...
5
votes
1answer
86 views

Using a single number instead of an IP address or a DNS name, which are concrete uses? [closed]

My question: I have read that using the single number equivalent (called the "binary equivalent" by the author) of the IP address instead of the actual IP address or the domain name can be used "to ...
-3
votes
1answer
43 views

Little bit confusing with nmap scan

I started MySQL with this command service mysql start and it worked pretty well. So: Using the netstat command, I found 127.0.0.1:3306 was in listening state, this is the MySQL service. So I did a ...
4
votes
1answer
85 views

Are there any statistics about packet filtering to prevent IP spoofing on the internet?

DDoS attacks via spoofed DNS(sec) are daily news for the last few years, but packet filtering should prevent IP spoofing on the internet. I tried (as an exercise) to spoof a packet on my VPS and on ...
1
vote
2answers
274 views

Should i use peer block to better secure my computer?

Should i be using peer block to secure my computer or is there a better way to accomplish the same task? I dont file share, my curiosity of peer block came from my research of security of my ...
4
votes
1answer
63 views

How do IP addresses leak information about whether they are a home client or not?

Websites such as hackforums.net, amongst others, are able to detect if you're using a proxy or VPN just by looking at your IP address and block you if you are doing so. I have never experienced any ...
0
votes
1answer
41 views

How am I identifiable when connecting to a site and is it possible to be anonymous? [duplicate]

When I visit a website, they get information about me such as IP address, country etc. What are other ways/other information with that they can identify me/my connection? How can I change/mask this ...
12
votes
4answers
2k views

How was (is?) the ping of death attack possible with IPv4?

While reading about Internet Protocol, I found myself reading about ping of death attacks: the thing that attracted my curiosity was the fact that these attacks could ever work! I mean, why wasn't ...