Internal IP Visible on Website

[jebenson]

Hello all,

I had something rather disturbing happen this morning. In searching for information on the web, I went to a site ([URL unfurl="true"]http://www.auditmypc.com/whats-my-ip.asp[/url]

and about halfway down the page it says:

" Notice! Your Private IP is xxx.xxx.xxx.xxx and unlike your
external IP of yyy.yyy.yyy.yyy, this should be hidden!
Patch software found here & see our Internal IP page."

The disturbing thing is that the Private IP it listed is correct. I am running behind a SonicWall Pro 200 in stealth mode, with NAT enabled. I did not think a website would be able to get my internal IP address.

So, I went to the "Internal IP" link on the left side of the page ([URL unfurl="true"]http://www.auditmypc.com/internal-ip.html[/url]) and read "...we use Java to grab the information and then pass it on to the server (Notice how everything ran without prompting you?)"

I am running Mozilla 1.7.6, so I tested this with IE - same result. I tested on a few other PCs and a server (all running Windows 2000, fully patched), using IE, Mozilla and FireFox, and some of the PCs show their internal IP and some don't. I cannot see any real difference in the configurations of these computers.

Does anybody have any information on this, like how I can make ALL of my computers not show their internal IP?

Also, I thought Java wasn't supposed to be able to do this without the user's permission.

What gives?

Thanks,
JEB

I used to rock and roll every night and party every day. Then it was every other day. Now I'm lucky if I can find 30 minutes a week in which to get funky. - Homer Simpson

 

[ITChef4]

I just read on castle cops that they can't really see your internal IP address. They are just faking it by publishing local only information into the web site. If you disable cookies and dump all your cookies and try the test again it will NOT show your internal IP address. They are just taking cookie info and publishing it on the site, they have no idea what your internal address is.

 

[2ffat]

I just blocked all cookies from that site and, yes, it did stop the internal IP from being displayed.


James P. Cottingham
-----------------------------------------
^{I'm number 1,229!
I'm number 1,229!}