OSINT › Module 8 › Lesson 4
Lab — Document YOUR Public IP Story
Consent, then curl ifconfig.me / api.ipify.org, write YOUR IP, look it up in official UIs later.
Visual · iws_publicip_lab
Learn YOUR WAN IP only if you consent. Then Shodan/Censys UI — no scrape. GATE 192.168.0.1.
Opening
The story is “what does the internet think my address is?” — told only with your consent.
If you consent, curl ifconfig.me and https://api.ipify.org to learn YOUR public IP. Write it in chmod 600 notes. Then, in the official Shodan and Censys UIs after YOUR accounts, search that IP. Do not scrape. Do not nmap 192.168.0.0/24. Do not treat 192.168.0.1 as the public IP. Original Cyberlium. Next: Quiz — Shodan and Censys.
1. GATE, consent, then maybe learn YOUR WAN address
. If it is a router, STOP using it as a target — your WAN IP is not 192.168.0.1. Official engines remain https://www.shodan.io/, https://search.censys.io/, https://www.greynoise.io/; BinaryEdge, ZoomEye, SecurityTrails stay named without abuse.
Consent matters because a public IP is location-adjacent. If you are on shared/campus NAT or do not want it on disk, write “declined” and the lab is still complete. Never collect a classmate's IP.
2. Run the echo services only after yes, then lock the file
curl -sS https://ifconfig.me and curl -sS https://api.ipify.org should roughly agree. If they disagree, write both. chmod 600. This is not a scan of 192.168.0.0/24. It is not hydra. It is not a webcam dork.
Then open Shodan/Censys in a browser, logged in as YOU, and search that IP. Write “indexed / not indexed / account pending.” Do not curl Shodan as a scraper.
Command guide
Run the echo services only after yes, then lock the file
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install curl
macOS: Built-in
Windows: Built-in (PowerShell: Invoke-WebRequest)
═══ COMMANDS ═══
Command — copy this
curl -sS -m 8 https://ifconfig.me > "$HOME/cyberlium-lab/t12-m08-l04-ifconfig-me.txt" || echo "skipped_or_failed" > "$HOME/cyberlium-lab/t12-m08-l04-ifconfig-me.txt" curl -sS -m 8 https://api.ipify.org > "$HOME/cyberlium-lab/t12-m08-l04-ipify.txt" || echo "skipped_or_failed" > "$HOME/cyberlium-lab/t12-m08-l04-ipify.txt"
3. Loopback check optional, then stop
curl -I if you started a toy. That proves loopback is not your WAN IP. Stop. Do not port-forward the toy to make Shodan “more interesting.”
Unknown index status is allowed. Guessing by scanning neighbors is not.
4. What you ship: consent + YOUR IP or declined + UI lookup note
Cover sheet with consent. ifconfig.me/ipify files or declined. Shodan/Censys UI status. chmod 600. No scrape, no /24, no 0.0.0.0. DEMO GATE.
5. What you record before the next lesson
WAN story path. DEMO identified/STOP. NEVER webcam dorks. Next: Quiz — Shodan and Censys.
6. Wrong vs right: strangers vs identifiers YOU own
Worked failure — same OSINT word, opposite target. Right never needs a classmate or a dump site.
Wrong
Scrape Shodan. nmap 192.168.0.0/24. Collect classmate IPs. webcam dorks. Publish WAN IP in a public gist.
Right
Consent, own IP, official UI. Next: Quiz — Shodan and Censys.
Mission: document YOUR public IP story without becoming a scanner
1) / STOP if router. 2) Consent yes → curl ifconfig.me and api.ipify.org; or write declined. 3) Search YOUR IP in Shodan/Censys official UIs (no scrape). Never nmap /24. Never webcam dorks. Never bind 0.0.0.0.
Stuck? Ask Cyberlium AI Mentor
If ifconfig.me fails, try api.ipify.org — not nmap, not a classmate's connection.
Knowledge Check
APPLY: You do not want your WAN IP on disk. The lab is complete when:
Multiple choice
Knowledge Check
APPLY: True or False: curl https://api.ipify.org is in-scope after you consent to learn YOUR public IP.
True or False
Knowledge Check
APPLY: After you write YOUR IP, you:
Multiple choice