Show Webpage's IP Address

brenji

Can we show what IP the webpage is? Resolve the domain name to the IP address. Normally, you have to check Tcpview and take the IP to a domain register. If we can peak at the active pages IP it would be really useful.

derDay

@brenji
in these times, where webpages often use a serverfarm or dedicated caching provider, I doubt, that you get useful infos (for example vivaldi.com is located at california? https://dnschecker.org/ip-location.php?ip=172.67.21.222 no, but cloudflare is, which protects the vivaldi domain).

in the meantime you can add https://dnschecker.org/ip-location.php as a webpanel to check manually

brenji

That's a good point about cache. I suppose I mean list the active TCP connection. Ignore the IP & DNS register. Do you ever look at netstat or tcpview? It'll list your browser and dozens of ips. If we could have a way to peak at the ip address associated with the active webpage that'd be really valuable. It can take a lot of time to narrow that down. Maybe its part of browser task manager baked into the Inspection elements. I'll check that out.

brenji

The TCP connection is there. Inspect>Network>Headers>Remote Address.
This is really useful. There can be many TCP connections building the objects on the page. You can see here all the webhosting, cdn, etc. all calling to different ips. Still tricky because there's so many elements. Is there a way to parse out all remote addresses? That would be amazing.

DoctorG

@brenji said in Show Webpage's IP Address:

Resolve the domain name to the IP address

But a domain can have more than one IPv4 and IPv6.
I do not really know what you need. IP of the domain or remote server?

brenji

I mean a list of the TCP connections on the page. In the debugging tools it lists all the ips as remote address, but one by one. It'd be great if it could tally all the remote ips, dedup into a list.

Have you ever looked at netstat or tcpview? It can be time consuming to figure match them. With this Remote Address data in the Headers, it's super useful. Heck, that's one reason to use Wireshark. If you deal with proxy logs, or just troubleshoot with tcpview, this is a dream. Just need to collect and dedup.

brenji

@DoctorG My apologizes, the subject might be misleading. I don't mean do a WhoIs or list the domain registration details. That would need an extension and api. Plus, one page goes to many ip addresses, which will be a generic webhosting or cdn. I mean, what ip address and active tcp connections are on the webpage.

I just found you can add Remote Address as a column Under Network Headers. Can sort and just view. That should be good enough. Still, stats or a dedup list would be awesome for notes. Active TCP connections on a webpage is important stuff. Glad to have learned this today!

BabetteY

@doctorg I'm sorry it took me so long, yes I can give you that information if needed.

allinone0

Lol

If the websites know our ip addr, then we should have the right to know theirs

And eye for an eye

Im up for this idea