Skip to main content
improved formatting and added some more info
Source Link
JOW
  • 2.3k
  • 2
  • 20
  • 24

Yes, but not in all cases. this depends on your network and routing setup. 

If you are behind a proxy firewall, then you will probably only see the IP address of the proxy all the time, as all of your web requests will be routed through it.

Also, if the webserver(i assume) is behind a Public IP/gateway and that MITM is also behind that same public IP/gateway, then you cannot detect it.

If an attacker is smart enough to MITM, i assume she is smart enough to spoof the IP addresses too.

Yes, but not in all cases. this depends on your network and routing setup. If you are behind a proxy firewall, then you will probably only see the IP address of the proxy all the time, as all of your web requests will be routed through it.

Also, if the webserver(i assume) is behind a Public IP/gateway and that MITM is also behind that same public IP/gateway, then you cannot detect it.

Yes, but not in all cases. this depends on your network and routing setup. 

If you are behind a proxy firewall, then you will probably only see the IP address of the proxy all the time, as all of your web requests will be routed through it.

Also, if the webserver(i assume) is behind a Public IP/gateway and that MITM is also behind that same public IP/gateway, then you cannot detect it.

If an attacker is smart enough to MITM, i assume she is smart enough to spoof the IP addresses too.

Source Link
JOW
  • 2.3k
  • 2
  • 20
  • 24

Yes, but not in all cases. this depends on your network and routing setup. If you are behind a proxy firewall, then you will probably only see the IP address of the proxy all the time, as all of your web requests will be routed through it.

Also, if the webserver(i assume) is behind a Public IP/gateway and that MITM is also behind that same public IP/gateway, then you cannot detect it.