I dont understand VPN test results

[ghworker2010]

I went to a couple of sites to test my VPN and dont understand the results....

my vpn is currently turned on and the server is in Germany.

the first thing I did was go to apple icon/ sys preferences / network to find out my IP address. It says that 'airport is connected to htc portable hotspot (my phone) and has IP address xxxx.185

before I went to the vpn test site I entered in google 'how do I find out my IP address' and it was displayed that my public IP address was xxxxx.220

I clicked on the link to test my vpn and it says under the interative detection heading:

IP address xxxxx.220 Germany

Web rtc xxxxxx.185 (in black font)

then it shows a shorter IP address in red font xxxx.98

under that DNS browser shows a german IP address xxx.137

With the above information are you able to help me work out if the VPN is working or not?

The second test link that I tried had the following information:

Your local IP addresses:

• xxxxxx.185

Your public IP addresses:

• xxx98

[Crossy]

Was the VPN active when you made the above post?

This IP finder works well for me http://www.ipaddresslocation.org/

[KhunBENQ]

The local address is of no relevance for the VPN functionality,

It will normally not change during a session.

Guess is is something like 192.168.1.185 or so?

My preferred site to see my public IP address:

http://whatismyipaddress.com/

Currently its 101.108.xxx.xxx, a Thai IP.

A special test of VPN weaknesses is this:

http://diafygi.github.io/webrtc-ips/

If this site displays your Thai IP (under public addresses) while the VPN is on, your VPN has a leak!

BTW: to anonymize your IP in such a post, better xxx the last two numbers.

This allows to see from which country the IP is.

[KhunBENQ]

Now I am on a Hongkong VPN, IP address 119.81.xxx.xxx (http://whatismyipaddress.com/).

The special test (http://diafygi.github.io/webrtc-ips/) also shows:

Your public IP addresses:

119.81.xxx.xxx

All good.

My private IP addresses are:

• 10.129.7.230
• 169.254.160.207
• 192.168.1.199

There is no risk publishing without knowing the public addresses.

[RichCor]

[...]

I clicked on the link to test my vpn and it says under the interative detection heading:

IP address xxxxx.220 Germany

Web rtc xxxxxx.185 (in black font)

then it shows a shorter IP address in red font xxxx.98

under that DNS browser shows a german IP address xxx.137

With the above information are you able to help me work out if the VPN is working or not?

As KunBENQ is pointing out, your VPN is working, but your system is 'leaking' your true ISP IP Address via your web browser's "Web rtc" (real-time-communications) feature.

So, the VPN has a Internet-facing IP address ending in .220

Your web browser setting is giving up your ISP's IP address ending in .185

Your web browser setting is probably also giving up your internal LAN address (something similar to 192.168.1.98) ending in .98

Your web browser setting is also giving up the current DNS (Domain Name Server url name to IP address resolver)

Having your local ISP IP address discoverable, at worst, allows web services to determine your real location, or prevent you from accessing geo-restricted content.

If you wish to keep your actual ISP address unknown then you'll either need to research how to disable web-rtc in your browser, or let us know what browser you're using an we can point you in the right direction.

Edited May 7, 2015 by RichCor

[bendejo]

See this thread

http://www.thaivisa.com/forum/topic/797634-how-to-fix-ip-being-revealed-when-using-vpn/

[ghworker2010]

[...]

I clicked on the link to test my vpn and it says under the interative detection heading:

IP address xxxxx.220 Germany

Web rtc xxxxxx.185 (in black font)

then it shows a shorter IP address in red font xxxx.98

under that DNS browser shows a german IP address xxx.137

With the above information are you able to help me work out if the VPN is working or not?

As KunBENQ is pointing out, your VPN is working, but your system is 'leaking' your true ISP IP Address via your web browser's "Web rtc" (real-time-communications) feature.

So, the VPN has a Internet-facing IP address ending in .220

Your web browser setting is giving up your ISP's IP address ending in .185

Your web browser setting is probably also giving up your internal LAN address (something similar to 192.168.1.98) ending in .98

Your web browser setting is also giving up the current DNS (Domain Name Server url name to IP address resolver)

Having your local ISP IP address discoverable, at worst, allows web services to determine your real location, or prevent you from accessing geo-restricted content.

If you wish to keep your actual ISP address unknown then you'll either need to research how to disable web-rtc in your browser, or let us know what browser you're using an we can point you in the right direction.

Im using chrome. Thanks for helping further if your able to.

[RichCor]

I read a post by someone under NDA by Google that WebRTC "can't" be fully disabled on Google Chrome browser and it will always be a security risk especially when the browser is used with *any* google services.

WebRTC service can be easily disabled in Firefox, and isn't even enabled in IE11.

So the suggestion is never use Google Chrome when you want/need to be anonymous under VPN -- and make sure Google Chrome hasn't been left running as a background task on your system.

[siam2007]

The local address is of no relevance for the VPN functionality,

It will normally not change during a session.

Guess is is something like 192.168.1.185 or so?

My preferred site to see my public IP address:

http://whatismyipaddress.com/

Currently its 101.108.xxx.xxx, a Thai IP.

A special test of VPN weaknesses is this:

http://diafygi.github.io/webrtc-ips/

If this site displays your Thai IP (under public addresses) while the VPN is on, your VPN has a leak!

BTW: to anonymize your IP in such a post, better xxx the last two numbers.

This allows to see from which country the IP is.

interesting....

I used this "diafyqi" thing and it is telling me I have 2 public IP addresses ? how do I have to understand that ? see --->>>

-----------------------------------------------------------------------------------------------------------------------------

This demo secretly makes requests to STUN servers that can log your request. These requests do not show up in developer consoles and cannot be blocked by browser plugins (AdBlock, Ghostery, etc.).

Your local IP addresses: Your public IP addresses:

• 100.89.166.xxx
• 49.230.177.xxx

[RichCor]

100.64.0.0 – 100.127.255.255

is a PRIVATE IP range used for communications between a service provider and its subscribers when using a Carrier-grade NAT (NAT64). Devices allocated an IP network address in this range will utilize a SHARED Public-facing Internet Proxy IP Address when connecting to the actual public Internet.

49.230.117.1 – 49.230.117.255

IP range allocated to AIS who reports the IP Addresses are used in Krung Thep (Bangkok) or Sisaket, Thailand.
I'm guessing this is the "Shared Public-facing Internet Proxy Address" used by the AIS NAT64 Router.

Works similar to how an ISP issues you one "WAN Internet IP Address" and your home Internet Router then shares that with all your home "LAN IP Address" devices. Except NAT64 is on a bigger scale.

Edited May 8, 2015 by RichCor