Private IP Disclosure
Private IP disclosure occurs when internal network addresses leak through HTTP headers or page content, revealing infrastructure details.
Why It Matters
Internal IP addresses help attackers map your network topology, identify targets for lateral movement, and craft more targeted attacks against your infrastructure.
How We Check
We scan response headers and body content for RFC 1918 private IP addresses (10.x.x.x, 172.16-31.x.x, 192.168.x.x), loopback addresses, and cloud internal hostnames.
How to Fix
Configure reverse proxies to strip internal headers (X-Forwarded-For, X-Real-IP). Review application code to ensure internal IPs are not included in error messages or debug output.
Related Security Checks
Check Your Website Now
Run a free security scan to check for Private IP Disclosure issues and 58+ other security vulnerabilities.
Scan Your Website Free