Re: Determining real IP in various online security tests

From: sponge (yosponge_at_yahoo.com)
Date: 06/29/03 

Date: 29 Jun 2003 10:28:35 -0700

On Thu, 26 Jun 2003 04:41:35 +0100, "LLFormat"
<dev-null@localhost.localdomain> wrote:

>Hello,
>
>I was wondering why it is that not all online security scanners can
>determine my real IP.
>
>For example, www.pcflank.com cannot determine my real IP, but does
seem to
>know that my ISP uses a proxy server. I was actually looking forward
to
>seeing the results from this previously unheard-of site, for me at
least,
>but as it (www.pcflank.com) couldn't determine my real IP, it stopped
the
>scan.
>
>However, www.grc.com can find my real IP in a matter of seconds. Is
it
>just a case of the scripting (if that's the right term) at
www.grc.com
>being simply better than that at www.pcflank.com ? Or is there 'more
to
>this than meets the eye' ?
>
>Thanks for your time, and for any information you might have.
>
>Regards,
>
>LLFormat.

GRC uses a small application called IPAgent to determine your real,
public IP address, which PCFlank does not. There are also Java and
ActiveX controls that can determine your real IP, the one bound to
your system.

You are correct that some scanners are detecting that your ISP uses
transparent proxies. (WHY your ISP is using transparent proxies at all
has me wondering, though.) At any rate, scanning a proxy is pointless.
They serve some security purpose although I'm wondering if they're
pulling a Comcast.

Have you tried scan.sygate.com?

Sponge
Sponge's Anti-Spyware Source
www.geocities.com/yosponge