Questions tagged [ip]
The Internet Protocol (IP) is the main protocol for sending packets accross the internet. It belongs to the internet layer in the internet protocol suite with the variants IPv4 and IPv6.
47
questions with no upvoted or accepted answers
4
votes
1
answer
661
views
Suspicious Skype IP connection
I'm posting this three weeks after a malware and keylogger scare that happened through Skype, and my own negligence, which resulted in a fresh install of Windows 7.
Everything's running and clean, ...
- 51
3
votes
0
answers
185
views
Hacked Raspberry-pi server
My internet provider doesn't let me open my ports, it's an optional service, and even when they finally said over the phone that I was allowed to open the ports I was still not able to. So I was ...
- 31
1
vote
1
answer
182
views
TCP with IP Spoofing, Is It Really Impossible?
I was reading: IP Spoofing with real IP when TCP 3-way handshake has been made
Where the answer says:
First of all, every TCP packet has a sequential identifier, which
starts at a random position. (...
- 11
1
vote
0
answers
304
views
A PDF ran GetAdaptersAddresses. Should I be concerned?
I received and opened a PDF that ran:
GetTickCount
IsDebuggerPresent
SetWindowsHookExW
Sleep
GetAdaptersAddresses
These are the 2 files it wrote:
C:\Windows\ServiceProfiles\LocalService\AppData\...
- 11
1
vote
0
answers
181
views
Bought used IP security camera, should I reflash the firmware?
I bought an used IP security camera on eBay, I dont know who was the previous owner. I've always thought that we can't trust 100% any firmwares/OSes that were been installed or used by someone else. ...
- 191
1
vote
1
answer
393
views
ARP poisoning NAC
I need some help in understanding the technique of Genians/Trustwave NAC regarding ARP poisoning.
As seen here Bypassing Trustwave NAC, it looks like a good method, but I don't simply get it. With ARP ...
- 76
1
vote
0
answers
102
views
How to tell if my hosting data is valid or a fake copy
I'm investigating an issue where we have consistent performance issues with our company web host and bad statistcs data in our hosting console. Our hosting provider console says our IP address is one ...
user181829
1
vote
0
answers
879
views
Attacking XAMPP Server with Burp Suite. How do I find victim's IP Address?
I am doing an online course on web penetration testing where the instructor tells us to install Kali Linux on one virtual machine (the attacker), and any other OS (I chose Manjaro Linux) on another ...
- 11
1
vote
0
answers
248
views
VPN chain in one machine without VM natively
Is it any way to make VPN chain in one machine (MAC or WIN) without VM natively (L2TP/IPsec)?
I need this for obtain an extra layer of security.
For example - if one VPN turns off I still have ...
- 507
1
vote
0
answers
144
views
Moving Target Defense implementation in context of SDN
I need to demonstrate MTD for a project in context of SDN by writing logic for the SDN controller. The logic could be as simple as creating a new Virtual IP every n seconds. However, i would like some ...
- 11
1
vote
0
answers
230
views
Web/search engine spider on local network?
I was setting up a test webserver on my local network earlier, and whilst sorting out the firewall I noticed the following in the log (/var/log/ufw.log - I'm using UFW on Ubuntu 14.04):
Jul 9 14:17:...
- 111
1
vote
0
answers
95
views
Migration from TDM to All IP: any security issues?
My phone operator is slowly abandoning TDM (Time Division Multiplexing) to replace it with IP connections. What are the security risked related to this change? will all the phone line be like in a big ...
- 23
1
vote
0
answers
230
views
ARP poisoning question
I'm writing a program that detects ARP poiosoning.
My question is:
How can I b sure my LAN hasn't been poisoned? Yes, I can use my settings and find the IP address of the default gateway and yes I ...
- 319
1
vote
1
answer
186
views
Real-world application of network steganography
I recently came across a topic of network steganography, mostly connected with modifying the headers of IP, TCP, ICMP. I was looking for some real-world examples of malware that uses it. I only found ...
- 111
1
vote
3
answers
2k
views
Is it possible to find email sender who has hidden their IP address in the header?
After someone has hidden their IP address so that it doesn't appear in the header of an email, is it possible to find the sender via another method?
- 11
0
votes
1
answer
69
views
Tracking someones location from social media messages
I lack knowledge about IP addresses or how the internet works. Let's assume that after I wrote a message to someone on social media, they just felt the need to track me down within a week, is it ...
- 1
0
votes
0
answers
177
views
UDP Port Scan Attack from a previously used IP address
Yesterday my internet connection is interrupted and I checked the logs. In logs, I saw 2 UDP Port Scan Attack happened a week ago. After a little bit of research, I convinced myself that it is common ...
- 1
0
votes
0
answers
313
views
Block all windows system outgoing internet connections but allow LAN on Private and VPN on Public
I have several windows PC connected to my mikrotik. I use basic features: file sharing, playing games with friends on home LAN and want to connect internet only through VPN (openVPN client).
But I am ...
- 1
0
votes
1
answer
150
views
How secure is my IP address?
I have a public facing IP address setup at a VM in the Google Cloud Platform.
I am wondering, if it is possible as an outsider to take away this public IP, or pretend another computer is this public ...
0
votes
0
answers
50
views
Is it possible to find past smartphone IP addresses locally?
Is there a way to locally find out past IP addresses used by a smartphone? For example, if someone has physical access to a smartphone and wants to find out its past IP addresses, can they find it out ...
- 11
0
votes
0
answers
52
views
How does an OTT firm counterattack hacked IP TV servers?
I was told that OTT (Streaming Video) firms launch attack on hacked IP TV servers. This SE thread deals with the pre-protection of OTT from hackers, but not with the methods to directly stop the ...
- 101
0
votes
0
answers
44
views
Dynamic DNS threats for allow list access to an application
I have some clients whose IP changes every day and static IP is not an option for them.
If I have them install a Dynamic DNS client, and then in my application .htaccess file refer to that Dynamic DNS ...
0
votes
1
answer
242
views
IPv6 address leaking despite VPN?
Given that commands like ifconfig or ip address don't require root privileges, apps can access information about ip address. If you use ipv4, you are normally behind NAT and apps would get an address ...
- 11
0
votes
0
answers
38
views
Is different X-Forwarded-For values per site an indicator for something malicious?
I am using a mobile ISP to access the internet. I noticed something really weird: most sites (e.g. www.whatismyip.com, https://www.iplocation.net/http-browser-header) report my IP as let's say IP A: ...
- 163
0
votes
0
answers
63
views
What metadata could be stored in the IPFS network and what could be collected by modified nodes?
I'm guessing uploading to IPFS also uploads some metadata, which gets shared as well, does this assumption hold any truth? According to this only content identifiers and node identifiers are in the ...
- 1,552
0
votes
0
answers
40
views
Should I let administrator account bypass IP ACL?
Let's say there is a system that can set IP ACL for security.
If administrator can't bypass IP ACL, account may by locked up when machine or network IP changed
But if administrator can bypass IP ACL, ...
- 101
0
votes
0
answers
57
views
Blacklist of hostname/IP so user cannot access my server private network?
My Web API acts as a proxy for users to connect to another server: User ➡️ My Server ➡️ Any Internet Server. They do that by specify a hostname ftp.example.com or 111.111.111.111. I do not want them ...
- 109
0
votes
0
answers
244
views
Unknown Cause of SPF Fail
I have the following SPF record:
v=spf1 include:_spf.mailspamprotection.com include:_spf.google.com ip4:209.85.220.0/24 ~all
Although I have included _spf.mailspamprotection.com in my SPF record, ...
- 101
0
votes
0
answers
119
views
Sending meaningless Addresses requests to a series of malicious IPs
i was testing somethings on browsers(It has nothing to do with what I am going to say) and accidentally i faced a case that when i browse meaningless addresses like abc/ signortest/ word/
the request ...
- 101
0
votes
1
answer
175
views
Could an OS or app store and send my old IP after I start using a VPN?
If I connect to a VPN, go to some websites, post something or browse something, is it possible for my OS (Windows 10) in this case to:
Store my IP before I connected to the VPN, say "old IP"...
- 101
0
votes
0
answers
120
views
How to identify the usage of the tcp/ip Trek Stack
In order to mitigate the potential exposure to ripple20 zero-day, I must identify the device/s that have the Trek TCP/IP stack installed.
Can I do this with software like LanSweeper? Or must I check ...
- 107
0
votes
0
answers
86
views
I now receive advertisements from a site used by a guest on my wifi she was on OS X I'm running LInux did they track my IP address only?
I seems a little strange that the only thing in common between me and my guest is that she was on my wifi and thus using my wan ip address, yet I am receiving advertising from a site she used. I'm ...
- 13
0
votes
0
answers
111
views
How does fail2ban et al deal with the IP neighbourhood of badly behaving IPs?
Please note, I'm looking more for established documented best-practice rather than personal opinion in this question. I'm also not interested in Fail2Ban specifically but the class of technologies ...
- 101
0
votes
0
answers
109
views
Channel the VPN through a WiFi hotspot
Suppose that I have my mobile connect with a VPN and I use my mobile as a WiFi router to provide internet to a laptop.
If I check my ip from the mobile, it is correctly the ip of VPN while if I check ...
0
votes
0
answers
128
views
Can installed applications bypass vpn and know your real ip?
Adding that the vpn has an hard kill switch enabled that doesn't allow connections other than through it.
- 1
0
votes
0
answers
95
views
IP traffic use cases, which could be broken by egress filtering
Egress filtering (blocking potentially spoofed IP packets with source IP outside the sub-network) is breaking multihoming.
However, what are other "normal", residential IP connection use cases which ...
- 133
0
votes
0
answers
84
views
How do I white list domain in ASG's?
I need to whitelist https://hooks.slack.com in Application Security Group (ASGs). As I have understood ASGs are static and they don't resolve DNS. Then how do I whitelist https://hooks.slack.com ...
- 101
0
votes
0
answers
557
views
VDSL modem getting probed?
My ZyXEL VMG8924-B30A VDSL modem recently had these alerts in its log. The WAN IP address of the modem is 10.225.205.128.
There was nothing like this before 1 May. What is this?
2019 -05 -01 T16:05:...
- 163
0
votes
0
answers
79
views
Retrieve hostnames for IP addresses to connect to HTTP services, when no (reverse) DNS PTR records are available?
I'm conducting a penetration test, where I'm facing the following problem:
After having retrieved a set of IP addresses through tools like whois, I cannot successfully connect to the HTTP-based ...
- 1,177
0
votes
0
answers
533
views
Mediafire Privacy
In their Data retention policy Mediafire states about the download records:
These are short term logs of who accessed and downloaded content from whom’s account. We keep this for the minimum amount ...
- 1
0
votes
0
answers
2k
views
Implications of IP Address as Subject Alt Name in certificates
Are there specific known negative security implications of including the IP address of a server as a Subject Alternate Name in the server's certificate?
- 131
0
votes
0
answers
1k
views
Someone or something tried to login to my Gmail using IP address of my shared hosting
My Gmail told me someone tried to login with the correct password. But Gmail blocked it because the IP address used is different from my IP address. When I looked up the IP address that tried to login ...
0
votes
0
answers
431
views
The simplest way to emulate TCP-IP protocol violation / anomaly attacks
Reading up upon security on web applications I did not found that much info on TCP-IP and in particular HTTP/UDP protocol violation / anomaly attacks. My question:
What is the general mechanism of ...
0
votes
1
answer
137
views
Is Cross-Domain IP tracking a security feature?
We're using a cloud based web security (proxy) service which basically takes our web requests, scans them and NATs these requests to their public IP addresses. NAT is being done on a per-session basis,...
- 101
-1
votes
1
answer
129
views
Malware from Android text?
Lots of questions!
I clicked a scam USPS link on my phone while half asleep. The website loaded and a small window popped up immediately and I quickly backed out of my browser but briefly saw the site ...
-1
votes
2
answers
8k
views
Kali Linux/Metasploit in VirtualBox - Issue with ports
I've been attempting to get port 4444 to open these past couple of days. I finally figured I'd try to get it working on my Windows machine first and I finally got it. Now, no matter what I do in the ...
-4
votes
2
answers
304
views
Get IP address of camera
Is it possible to get the global IP address of a nearby camera?
For example, an IP camera is connected to a network, but you are not on that network, and cant get access for whatever reason) but you ...
- 113