I Can't Scan This Website
Source: YouTube · John Hammond · published Sep 3, 2024 · 23:06
Internet 2.0's cloaking firewall effectively hides server infrastructure from network scans and blocks automated reconnaissance tools 0:00-0:45.
Key Takeaways:
• The cloaking firewall blocks common nmap scans by default, showing all ports as "ignored" rather than filtered, effectively hiding the server's presence 12:08-12:25
• It features an intrusion detection system with live monitoring that automatically blocks IP addresses exhibiting suspicious behavior 3:26-3:40
• The firewall uses Nginx as a reverse proxy and web application firewall, employing certificate tricks to mask server information 8:16-8:30
• The automatic blocking system called "Raiden" tracks malicious activities and can temporarily or permanently block offending IPs 5:45-6:10
• While extremely effective against mass scanning, a narrow limitation exists where very specific single-port scans from new IP addresses might temporarily detect open ports 18:20-19:05
The cloaking firewall successfully prevents attackers from gathering basic intelligence about protected infrastructure, making it significantly harder to identify and target systems 21:40-22:00.
Sources:
- 0:00-0:45 Introduction to the cloaking firewall
- 3:26-3:40 Intrusion detection system
- 5:45-6:10 Automatic blocking system
- 8:16-8:30 Nginx reverse proxy functionality
- 12:08-12:25 Testing nmap scans
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
I've been trying to end map scan this IP address but I can barely get any results back I'm trying to find open ports so that I could interact with this server across the internet and fingerprint the attack surface just like any hacker or thread actor would and I need your help here because seriously I've tried tons of different types of scans but these automated tools all the scanning tools and utilities don't seem to find anything and that's because this server is set up with internet 2.0's cloaking firewall and it's pretty slick it works to mask hide and shield your infrastructure from external adversaries we'll try as many different scans as we can in this video we'll throw the kitchen sink but it's practically hidden from the internet now let me say straight up this is a fully featured…