Questions tagged [ip]

The Internet Protocol (IP) is the main protocol for sending packets accross the internet. It belongs to the internet layer in the internet protocol suite with the variants IPv4 and IPv6.

Filter by
Sorted by
Tagged with
1 vote
0 answers
25 views

How to access web content protected by network ip? [closed]

I am testing a website that allows content fetch only when you access it from an IP a certain Wi-Fi network. However if you want to access the website from different network, you get the response of {&...
0 votes
0 answers
24 views

Can someone find out my other websites based on the IP address of one of my websites? [duplicate]

As far as I know, the IP address of any website is detectable by a simple ping test. Say I host several websites on a given webhost with a single IP. If someone finds out the IP of one of my websites, ...
1 vote
1 answer
75 views

How to determine what process accessed the web browser

I received a CrowdStrike Alert where a particular user was using Chrome and the process was connected to the web browser but the user does not know what he did to connect to the malicious IP address ...
  • 11
0 votes
0 answers
42 views

Is it possible to find past smartphone IP addresses locally?

Is there a way to locally find out past IP addresses used by a smartphone? For example, if someone has physical access to a smartphone and wants to find out its past IP addresses, can they find it out ...
  • 1
0 votes
2 answers
67 views

Using IP for one request (one time) protection

I have an endpoint that accepts data as signed PASETO tokens. It has one problem - if someone "cracks" the TLS encryption or this signed token leaks then everyone can use it as long as the ...
0 votes
0 answers
36 views

How does an OTT firm counterattack hacked IP TV servers?

I was told that OTT (Streaming Video) firms launch attack on hacked IP TV servers. This SE thread deals with the pre-protection of OTT from hackers, but not with the methods to directly stop the ...
  • 101
0 votes
1 answer
67 views

TCP with IP Spoofing, Is It Really Impossible?

I was reading: IP Spoofing with real IP when TCP 3-way handshake has been made Where the answer says: First of all, every TCP packet has a sequential identifier, which starts at a random position. (...
  • 1
0 votes
2 answers
70 views

Is it possible to get "real" IP from a host machine which is using a SSL-VPN connection?

We'd like to obtain the public IP of a user that connects via SSL VPN, the one that the user would have if he didn't connect that way. But this looks impossible to do, if we use web services like the ...
0 votes
0 answers
43 views

Dynamic DNS threats for allow list access to an application

I have some clients whose IP changes every day and static IP is not an option for them. If I have them install a Dynamic DNS client, and then in my application .htaccess file refer to that Dynamic DNS ...
0 votes
1 answer
104 views

IPv6 address leaking despite VPN?

Given that commands like ifconfig or ip address don't require root privileges, apps can access information about ip address. If you use ipv4, you are normally behind NAT and apps would get an address ...
  • 11
0 votes
3 answers
196 views

Why is my IP address hidden over HTTPS but not HTTP while I'm behind a proxy?

I am trying to connect to a supplier API but they have a whitelist of the IPs which can consume their API. I gave them my server IP so that they could add it to the whitelist but it is still not ...
0 votes
0 answers
76 views

TLS certificate with private IP address [duplicate]

I am trying to get an Apache server running over HTTPS on a local network with an IP address 192.168.. And our requirement is to make this local server secure. (no outside network / internet ...
  • 1
1 vote
1 answer
112 views

How risky is it to let someone know the name of your Windows PC?

I have here a situation where if I share this file with someone on the internet, the file may contain: 1. data pointing to the directories where it is stored on my computer, along with 2. the name of ...
  • 25
0 votes
0 answers
27 views

Is different X-Forwarded-For values per site an indicator for something malicious?

I am using a mobile ISP to access the internet. I noticed something really weird: most sites (e.g. www.whatismyip.com, https://www.iplocation.net/http-browser-header) report my IP as let's say IP A: ...
  • 163
1 vote
3 answers
149 views

Are country IP address blocks officially standardised and can they be reliably used for access control?

I was setting up firewalld on an enterprise server and came across their concept of firewall zones. I figured I can easily use them and their source property to restrict access to SSH to only the ...
0 votes
2 answers
86 views

Is a VPN effective when connected to WiFi network that requires authentication?

I pay monthly for a VPN. However, I browse online while connected to my university WiFi which requires authentication to use. The WiFi is open (no password directly) but when someone connects to it a ...
0 votes
1 answer
183 views

Would storing the users IP address in a session token be more secure?

In a web app, would storing a users IP address in a session be more secure then storing it without it? I think that if I store a JWT in their cookies that includes their IP address for session ...
0 votes
0 answers
32 views

Are there any security issues with getting the IP address of a user? [duplicate]

So I've found a way to get the IP address of a user on a popular website without taking them out of said website (i.e. without making them click any links) by making them (the user) send a request to ...
0 votes
1 answer
109 views

Why don’t routers request permission when attempting to connect to an unknown address? (Or why do they still assume every connection is trustworthy?)

I’m imagining a system similar to UAC on Windows but implemented at the router level for IP addresses instead. (Or AS numbers, BGP numbers, Port number, etc…) Naturally this makes router setup ...
  • 101
0 votes
1 answer
112 views

Spoofing TCP/IP headers and uniqueness of the host name

I have some related questions: Is it possible to spoof the source address in the TCP/IP header when using HTTPS? If possible, is there any way to detect source address change? I think the checksum is ...
0 votes
1 answer
85 views

IP address in access.log is incorrect and likely hacked

I just noticed in my access.log several POST requests coming from a (hidden) registration sub page that is not accessible via any link. A 'hacker' seems to have posted a form from there (manually it ...
  • 103
0 votes
0 answers
40 views

How to harden browser against IP leaks when using a VPN?

I've been through a lot of forums and articles about safety/security/anonymous using the internet and still haven't found the right configuration for me. I want to go through the internet without my ...
  • 1
0 votes
1 answer
74 views

Application ip control

My goal is to analyze the traffic of an Android application, to check if it contacts any unofficial IPs. Using PCAPRemote I created a connection log file and transferred it to the PC, where I am ...
  • 1
0 votes
1 answer
68 views

Internet connection issues with new cable broadband (100/10) service, intermittently able to reach neighbor's management interface at 192.168.x.x?

I'm unfamiliar with coax broadband provisioning specifics with new (100/10) service in a residential neighborhood, and intermittently getting Internet disconnections and interestingly discovered the ...
-1 votes
1 answer
108 views

Malware from Android text?

Lots of questions! I clicked a scam USPS link on my phone while half asleep. The website loaded and a small window popped up immediately and I quickly backed out of my browser but briefly saw the site ...
0 votes
1 answer
74 views

Is creating a backdoor without specifying an IP possible?

Is it possible to create a backdoor without configuring an IP? For example, if I want to create a listener that everyone can access, what can I do? Something like a backdoor, RAT or something like ...
0 votes
0 answers
33 views

What metadata could be stored in the IPFS network and what could be collected by modified nodes?

I'm guessing uploading to IPFS also uploads some metadata, which gets shared as well, does this assumption hold any truth? According to this only content identifiers and node identifiers are in the ...
0 votes
2 answers
155 views

Why can't I connect to a website via its IP address?

When I type in PowerShell ping security.stackexchange.com ...it gives me the following: Pinging security.stackexchange.com [151.101.193.69] And as far as I understand, this IP address corresponds to ...
0 votes
0 answers
39 views

Should I let administrator account bypass IP ACL?

Let's say there is a system that can set IP ACL for security. If administrator can't bypass IP ACL, account may by locked up when machine or network IP changed But if administrator can bypass IP ACL, ...
0 votes
1 answer
51 views

Why nslookup by ip does not give the same domain name? [closed]

I first ran this command: nslookup www.certifiedhacker.com This was the output: Non-authoritative answer: www.certifiedhacker.com canonical name = certifiedhacker.com. Name: certifiedhacker.com ...
0 votes
1 answer
45 views

Determining threat when performing OSINT

I am new to ethical hacking and I often find myself really confused when evaluating and determining the danger level of information that can be found regarding a domain when performing OSINT. I'm not ...
  • 197
0 votes
1 answer
33 views

Multiple random requests for Non-Existent URLs from a single IP resulting in 404s

We sometimes get to see this behavior from a single IP address/logged in user - There are a lot of hits on our server that have .png at the end of the URL which results in a 404 because we don't have ...
  • 1
0 votes
1 answer
286 views

Does Google Meet leak my IP?

My friend asked me if it possible to get somebody's IP from Google Meet just by being in the same meeting. He found a video that says it is possible. But when I read about webRTC and STUN servers, I ...
  • 1
2 votes
2 answers
152 views

Before Tor, VPNs and proxy services, how did cybercrimals remain anonymous?

I have read that they used previously breached machines, but to try to gain access to those machines they also needed some kind of protection right? How did they do it then?
  • 21
0 votes
1 answer
54 views

Who is accessing my pop3 email accounts? [closed]

Recently I started receiving "Third-party application access to your Zoho Account" warning emails from Zoho.com regarding my Zoho email accounts, saying things like: We noticed a third-...
  • 315
0 votes
3 answers
128 views

Privacy - If I get a new IP from my ISP (home network), can websites infer the new IP is me?

Let's say I am a member of a website. I always sign in from computer A, which is not linked at all with computer B, and I have always signed in from my home network. Now let's say my ISP releases the ...
0 votes
0 answers
46 views

Blacklist of hostname/IP so user cannot access my server private network?

My Web API acts as a proxy for users to connect to another server: User ➡️ My Server ➡️ Any Internet Server. They do that by specify a hostname ftp.example.com or 111.111.111.111. I do not want them ...
  • 109
0 votes
1 answer
56 views

Basic explanation for why I'm getting different IP addresses when querying for users IP W/without VPN?

I'm trying to work out some basic knowledge of rate-limiting for my server security so I know how it works. Seems pretty simple as there are different algorithms as well as IP limiting methods. This ...
  • 149
0 votes
2 answers
111 views

When a backdoor is installed in a device, does it become vulnerable to 'everyone', or only to the attacker?

I'm running tests on my devices. But I'm scared that by doing this, I will make my devices vulnerable. If I executed a backdoor sent to me (being an app with a payload on it, or doc, or email, etc), ...
0 votes
0 answers
42 views

Should user session be restricted to a given IP? [duplicate]

If users are authentified with a sessionID (through cookies), would it increase security if we force users to log in again if for any reason their IP changed during their session? Or is this not worth ...
  • 101
0 votes
2 answers
94 views

Reasons why IP spoofing might fail

The way I understand is that if someone wants to pretend to be John Doe by using his IP address to conduct nefarious things on the internet, it would not be possible because traffic would only be one ...
  • 1
0 votes
0 answers
59 views

Has anyone successfully set-up the original Sub7?

When I first entered the information security sector in 2007 I remember reading about a dated trojan called Sub7, released in 1999. Focusing on the legacy version, not the new release, has anybody ...
1 vote
0 answers
238 views

A PDF ran GetAdaptersAddresses. Should I be concerned?

I received and opened a PDF that ran: GetTickCount IsDebuggerPresent SetWindowsHookExW Sleep GetAdaptersAddresses These are the 2 files it wrote: C:\Windows\ServiceProfiles\LocalService\AppData\...
0 votes
0 answers
143 views

Unknown Cause of SPF Fail

I have the following SPF record: v=spf1 include:_spf.mailspamprotection.com include:_spf.google.com ip4:209.85.220.0/24 ~all Although I have included _spf.mailspamprotection.com in my SPF record, ...
  • 101
1 vote
3 answers
4k views

Can my IP address be tracked from an Instagram DM?

Could someone be able to find my IP address and where my ISP is located from an anonymous DM on Instagram? (I am planning to instantly deactivate the account after sending the message if that matters.)...
0 votes
1 answer
139 views

Is an IP based whitelist practical for controlling internet use?

I have to set up internet controls for our schools study hall/testing center. The idea is that computers on that network should only be able to access the school's webportal and learning platform ...
  • 113
-1 votes
1 answer
1k views

Using Github's Public IP Address as Remote URL

My company distributes software that runs on locally installed Ubuntu Virtual Machines. To update the software, we pull our latest code down from Github. Some IT departments have github blocked on ...
1 vote
1 answer
184 views

Why are Bogons preferred in DDos attacks?

I am currently reading literature that states that Bogons are commonly used by attackers when conducting DDos attacks. I did some searching for an explanation and all I could find was that "...
  • 75
0 votes
1 answer
104 views

Reverse-proxy issues

I am trying to create a reverse-proxy web application using Flask. I don't really know weather to call it reverse-proxy or not but my idea is that the web app gets a URL from ../proxy/<URL>, ...
  • 101
0 votes
0 answers
212 views

WebRTC IP leak in 2021 [duplicate]

it's been a while since WebRTC was seen as a possible opportunity for IP leak when using a VPN. We're in 2021 today and I was wondering if there have been some improvements with this protocol in term ...
  • 161

1
2 3 4 5
13