Ask HN: What is this user doing?

Re:Ask HN: What is this user doing? by gkoberger on Saturday December 18, 2021 @06:08PM (#29609574)

The IP address 34.66.115.47 points to Google Cloud. I think there's a possibility the real address is legitimate and it's just a coincidence? Or maybe they're using a Tor-like service that "covers their tracks" by sending randomized data?

If you don't see any obvious reason for malice, I think you should email them and ask!

[ Parent | on HN ]

Re:Ask HN: What is this user doing? by justtologin on Saturday December 18, 2021 @06:48PM (#29609907)

So yeah

  # curl ipinfo.io/34.66.115.47
  {
  "ip": "34.66.115.47",
  "hostname": "47.115.66.34.bc.googleusercontent.com",
  "city": "Council Bluffs",
  "region": "Iowa",
  "country": "US",
  "loc": "41.2619,-95.8608",
  "org": "AS396982 Google LLC",
  "postal": "51502",
  "timezone": "America/Chicago",
  "readme": "https://ipinfo.io/missingauth"}

What kind of url is that? This cant be someone using a browser as normal on their own machine can it? Could they be trying to build a google form or document or something that embeds part of the sign up form?

Edit: unsubstantiated source [0] says that domain relates to Google app engine, so could be the person is working on a project that includes some form submission capability and somehow is using your site for testing

https://superuser.com/questions/892437/what-do-you-do-if-you...

[ Parent | on HN ]

Re:Ask HN: What is this user doing? by alam2000 on Saturday December 18, 2021 @07:33PM (#29610211)

It looks like a IP geolocaion API. However, it has missing authentication under the readme.

[ Parent | on HN ]

Re:Ask HN: What is this user doing? by justtologin on Saturday December 18, 2021 @07:44PM (#29610264)

No I wasnt clear, I used the api at ipinfo.io to get the information about the ip address the parent had posted. That info pertains to the "problem" ip he is encountering, its not generated by some service at that address

[ Parent | on HN ]