Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.

Questions tagged [ip]

The Internet Protocol (IP) is the main protocol for sending packets accross the internet. It belongs to the internet layer in the internet protocol suite with the variants IPv4 and IPv6.

Filter by
Sorted by
Tagged with
0 votes
0 answers
16 views

Is different X-Forwarded-For values per site an indicator for something malicious?

I am using a mobile ISP to access the internet. I noticed something really weird: most sites (e.g. www.whatismyip.com, https://www.iplocation.net/http-browser-header) report my IP as let's say IP A: ...
user avatar
  • 163
0 votes
2 answers
111 views

Are country IP address blocks officially standardised and can they be reliably used for access control?

I was setting up firewalld on an enterprise server and came across their concept of firewall zones. I figured I can easily use them and their source property to restrict access to SSH to only the ...
user avatar
0 votes
2 answers
59 views

Is a VPN effective when connected to WiFi network that requires authentication?

I pay monthly for a VPN. However, I browse online while connected to my university WiFi which requires authentication to use. The WiFi is open (no password directly) but when someone connects to it a ...
user avatar
0 votes
1 answer
46 views

Would storing the users IP address in a session token be more secure?

In a web app, would storing a users IP address in a session be more secure then storing it without it? I think that if I store a JWT in their cookies that includes their IP address for session ...
user avatar
0 votes
0 answers
31 views

Are there any security issues with getting the IP address of a user? [duplicate]

So I've found a way to get the IP address of a user on a popular website without taking them out of said website (i.e. without making them click any links) by making them (the user) send a request to ...
user avatar
0 votes
1 answer
100 views

Why don’t routers request permission when attempting to connect to an unknown address? (Or why do they still assume every connection is trustworthy?)

I’m imagining a system similar to UAC on Windows but implemented at the router level for IP addresses instead. (Or AS numbers, BGP numbers, Port number, etc…) Naturally this makes router setup ...
user avatar
  • 101
0 votes
1 answer
38 views

Spoofing TCP/IP headers and uniqueness of the host name

I have some related questions: Is it possible to spoof the source address in the TCP/IP header when using HTTPS? If possible, is there any way to detect source address change? I think the checksum is ...
user avatar
0 votes
1 answer
78 views

IP address in access.log is incorrect and likely hacked

I just noticed in my access.log several POST requests coming from a (hidden) registration sub page that is not accessible via any link. A 'hacker' seems to have posted a form from there (manually it ...
user avatar
  • 103
0 votes
0 answers
30 views

How to harden browser against IP leaks when using a VPN?

I've been through a lot of forums and articles about safety/security/anonymous using the internet and still haven't found the right configuration for me. I want to go through the internet without my ...
user avatar
  • 1
0 votes
1 answer
71 views

Application ip control

My goal is to analyze the traffic of an Android application, to check if it contacts any unofficial IPs. Using PCAPRemote I created a connection log file and transferred it to the PC, where I am ...
user avatar
  • 1
0 votes
1 answer
63 views

Internet connection issues with new cable broadband (100/10) service, intermittently able to reach neighbor's management interface at 192.168.x.x?

I'm unfamiliar with coax broadband provisioning specifics with new (100/10) service in a residential neighborhood, and intermittently getting Internet disconnections and interestingly discovered the ...
user avatar
-1 votes
1 answer
87 views

Malware from Android text?

Lots of questions! I clicked a scam USPS link on my phone while half asleep. The website loaded and a small window popped up immediately and I quickly backed out of my browser but briefly saw the site ...
user avatar
0 votes
1 answer
69 views

Is creating a backdoor without specifying an IP possible?

Is it possible to create a backdoor without configuring an IP? For example, if I want to create a listener that everyone can access, what can I do? Something like a backdoor, RAT or something like ...
user avatar
0 votes
0 answers
27 views

What metadata could be stored in the IPFS network and what could be collected by modified nodes?

I'm guessing uploading to IPFS also uploads some metadata, which gets shared as well, does this assumption hold any truth? According to this only content identifiers and node identifiers are in the ...
user avatar
0 votes
2 answers
144 views

Why can't I connect to a website via its IP address?

When I type in PowerShell ping security.stackexchange.com ...it gives me the following: Pinging security.stackexchange.com [151.101.193.69] And as far as I understand, this IP address corresponds to ...
user avatar
0 votes
0 answers
35 views

Should I let administrator account bypass IP ACL?

Let's say there is a system that can set IP ACL for security. If administrator can't bypass IP ACL, account may by locked up when machine or network IP changed But if administrator can bypass IP ACL, ...
user avatar
0 votes
1 answer
36 views

Why nslookup by ip does not give the same domain name? [closed]

I first ran this command: nslookup www.certifiedhacker.com This was the output: Non-authoritative answer: www.certifiedhacker.com canonical name = certifiedhacker.com. Name: certifiedhacker.com ...
user avatar
0 votes
1 answer
38 views

Determining threat when performing OSINT

I am new to ethical hacking and I often find myself really confused when evaluating and determining the danger level of information that can be found regarding a domain when performing OSINT. I'm not ...
user avatar
  • 197
0 votes
1 answer
30 views

Multiple random requests for Non-Existent URLs from a single IP resulting in 404s

We sometimes get to see this behavior from a single IP address/logged in user - There are a lot of hits on our server that have .png at the end of the URL which results in a 404 because we don't have ...
user avatar
  • 1
0 votes
1 answer
147 views

Does Google Meet leak my IP?

My friend asked me if it possible to get somebody's IP from Google Meet just by being in the same meeting. He found a video that says it is possible. But when I read about webRTC and STUN servers, I ...
user avatar
  • 1
2 votes
2 answers
129 views

Before Tor, VPNs and proxy services, how did cybercrimals remain anonymous?

I have read that they used previously breached machines, but to try to gain access to those machines they also needed some kind of protection right? How did they do it then?
user avatar
  • 21
0 votes
1 answer
48 views

Who is accessing my pop3 email accounts? [closed]

Recently I started receiving "Third-party application access to your Zoho Account" warning emails from Zoho.com regarding my Zoho email accounts, saying things like: We noticed a third-...
user avatar
  • 315
0 votes
3 answers
113 views

Privacy - If I get a new IP from my ISP (home network), can websites infer the new IP is me?

Let's say I am a member of a website. I always sign in from computer A, which is not linked at all with computer B, and I have always signed in from my home network. Now let's say my ISP releases the ...
user avatar
0 votes
0 answers
46 views

Blacklist of hostname/IP so user cannot access my server private network?

My Web API acts as a proxy for users to connect to another server: User ➡️ My Server ➡️ Any Internet Server. They do that by specify a hostname ftp.example.com or 111.111.111.111. I do not want them ...
user avatar
  • 109
0 votes
1 answer
46 views

Basic explanation for why I'm getting different IP addresses when querying for users IP W/without VPN?

I'm trying to work out some basic knowledge of rate-limiting for my server security so I know how it works. Seems pretty simple as there are different algorithms as well as IP limiting methods. This ...
user avatar
  • 117
0 votes
2 answers
111 views

When a backdoor is installed in a device, does it become vulnerable to 'everyone', or only to the attacker?

I'm running tests on my devices. But I'm scared that by doing this, I will make my devices vulnerable. If I executed a backdoor sent to me (being an app with a payload on it, or doc, or email, etc), ...
user avatar
0 votes
0 answers
39 views

Should user session be restricted to a given IP? [duplicate]

If users are authentified with a sessionID (through cookies), would it increase security if we force users to log in again if for any reason their IP changed during their session? Or is this not worth ...
user avatar
  • 101
0 votes
2 answers
83 views

Reasons why IP spoofing might fail

The way I understand is that if someone wants to pretend to be John Doe by using his IP address to conduct nefarious things on the internet, it would not be possible because traffic would only be one ...
user avatar
  • 1
0 votes
0 answers
50 views

Has anyone successfully set-up the original Sub7?

When I first entered the information security sector in 2007 I remember reading about a dated trojan called Sub7, released in 1999. Focusing on the legacy version, not the new release, has anybody ...
user avatar
1 vote
0 answers
203 views

A PDF ran GetAdaptersAddresses. Should I be concerned?

I received and opened a PDF that ran: GetTickCount IsDebuggerPresent SetWindowsHookExW Sleep GetAdaptersAddresses These are the 2 files it wrote: C:\Windows\ServiceProfiles\LocalService\AppData\...
user avatar
0 votes
0 answers
111 views

Unknown Cause of SPF Fail

I have the following SPF record: v=spf1 include:_spf.mailspamprotection.com include:_spf.google.com ip4:209.85.220.0/24 ~all Although I have included _spf.mailspamprotection.com in my SPF record, ...
user avatar
  • 101
1 vote
3 answers
2k views

Can my IP address be tracked from an Instagram DM?

Could someone be able to find my IP address and where my ISP is located from an anonymous DM on Instagram? (I am planning to instantly deactivate the account after sending the message if that matters.)...
user avatar
0 votes
1 answer
119 views

Is an IP based whitelist practical for controlling internet use?

I have to set up internet controls for our schools study hall/testing center. The idea is that computers on that network should only be able to access the school's webportal and learning platform ...
user avatar
  • 113
0 votes
1 answer
839 views

Using Github's Public IP Address as Remote URL

My company distributes software that runs on locally installed Ubuntu Virtual Machines. To update the software, we pull our latest code down from Github. Some IT departments have github blocked on ...
user avatar
1 vote
1 answer
142 views

Why are Bogons preferred in DDos attacks?

I am currently reading literature that states that Bogons are commonly used by attackers when conducting DDos attacks. I did some searching for an explanation and all I could find was that "...
user avatar
  • 75
0 votes
1 answer
89 views

Reverse-proxy issues

I am trying to create a reverse-proxy web application using Flask. I don't really know weather to call it reverse-proxy or not but my idea is that the web app gets a URL from ../proxy/<URL>, ...
user avatar
  • 101
0 votes
0 answers
189 views

WebRTC IP leak in 2021 [duplicate]

it's been a while since WebRTC was seen as a possible opportunity for IP leak when using a VPN. We're in 2021 today and I was wondering if there have been some improvements with this protocol in term ...
user avatar
  • 161
0 votes
0 answers
45 views

Do authorities have a limited amount of time to pursue cyber-crime? [duplicate]

If authorities find access logs or some other linking between an IP address and the access of illegal materials online, in order to trace down who the owner of the IP address is any IP assignment logs ...
user avatar
1 vote
1 answer
164 views

Real-world application of network steganography

I recently came across a topic of network steganography, mostly connected with modifying the headers of IP, TCP, ICMP. I was looking for some real-world examples of malware that uses it. I only found ...
user avatar
0 votes
1 answer
275 views

I clicked on a link that got my ip leaked [duplicate]

So i clicked on a link to play a game with someone but it turns out the link was an ip grabber i think. The hacker now knows what country i live in and the password to the game account. I don't know ...
user avatar
0 votes
1 answer
570 views

Someone got my IP address, and I'm scared they might find me [duplicate]

Around a year ago, I was on Reddit and clicked on a hyperlink, not knowing it grabs your IP. Ever since then, the person who grabbed my IP would sometimes comment on my Reddit posts and comments ...
user avatar
0 votes
0 answers
113 views

Sending meaningless Addresses requests to a series of malicious IPs

i was testing somethings on browsers(It has nothing to do with what I am going to say) and accidentally i faced a case that when i browse meaningless addresses like abc/ signortest/ word/ the request ...
user avatar
  • 101
0 votes
2 answers
1k views

I clicked on a grabify link and I don't know if it installed a virus [duplicate]

I was in a discord recently and someone sent a grabify link. I clicked on it and it led me to a soundcloud page. I think my firewall on my router is alright, is that enough to prevent them from doing ...
user avatar
1 vote
2 answers
652 views

Risks associated with IP whitelisting

I was told that IP whitelisting should not be considered safe and are hence obsolete. I fail to understand why this statement holds: can IPs be impersonated? if not, then why is it a bad/obsolete way ...
user avatar
  • 113
1 vote
2 answers
216 views

Relationship between DoT / DoH and HTTPS

I'm trying to understand the different roles that DoT / DoH and HTTPS are playing when it comes to protecting sensitive data in the internet. I spend the day reading a lot of stuff about DoT, HTTPS, ...
user avatar
  • 113
0 votes
1 answer
866 views

I clicked on a grabify link. What can someone do with my IP? [duplicate]

I clicked on a link in discord not knowing it was a grabify link. I understand that an IP only gives your general location but what else can someone do with my IP? Can they find a way to access my ...
user avatar
5 votes
1 answer
993 views

How to ensure identity for server-to-server communication over IP

How would one go about ensuring that a server at a given IP address is who it says it is? I need to send confidential data to another server at another IP address. If the server had a public domain it ...
user avatar
0 votes
0 answers
29 views

sending an email without being traced (IP, identity) [duplicate]

I want to send an email through Gmail without the other side being able to trace me. I actually want to report something. I opened up a new Gmail account with a fake name (I used Tor to log in). I did ...
user avatar
0 votes
1 answer
1k views

Is VLAN better than guest wifi feature

I own the internet connection and router and going to share it with apartment mates. I want to accomplish the following things Isolate our networks, such that they cannot see my internet activity or ...
user avatar
0 votes
4 answers
265 views

How can I safeguard myself if share the same router with the people living in my apartment

I share the same wireless router with some other people living in the same apartment. I want to safeguard my privacy and also not be held liable for their internet activity. The modem from the ISP ...
user avatar

1
2 3 4 5
13