Received-SPF: pass (zohomail.com: domain of dataimpulse.com designates 209.85.161.48 as permitted sender) client-ip=209.85.161.48; envelope-from=support@dataimpulse.com; helo=mail-oo1-f48.google.com;
MIME-Version: 1.0
References: <196839f547a.c9a62b2d1311601.4702380974062659638@markasoftware.com>
 <CAGy5s5gxegJFQ9Aty1L37S-z0qsnRL3G6QL8LYpwOUB77tZBXg@mail.gmail.com>
In-Reply-To: <CAGy5s5gxegJFQ9Aty1L37S-z0qsnRL3G6QL8LYpwOUB77tZBXg@mail.gmail.com>
From: DataImpulse Support Team <support@dataimpulse.com>
Date: Fri, 2 May 2025 04:11:15 +0300
Message-ID: <CAGy5s5jSgGmZ=mM-47TxhPFijXPG5jO4PZd2EGs2VmTYuLyvGA@mail.gmail.com>
Subject: Re: security issue -- access to 192.168.0.1 and other reserved IPs
 through proxy allows access to residential router admin pages
To: Mark Polyakov <mark@markasoftware.com>
Content-Type: multipart/alternative; boundary="00000000000062ea2f06341cd47d"

--00000000000062ea2f06341cd47d
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Greetings!

Earlier, you contacted us with the issue detected.

Thank you for raising this matter!

We are constantly looking for ways to improve our service, and your request
has been taken into consideration.

Since your appeal, we have been working on fixing it. The issue is now
fixed, and as a thank you and bonus, we have provided 100 GB of traffic to
your Residential plan.

Thank you for your interest in our service!

If you have any additional questions or suggestions, don't hesitate to
contact us. We are always in touch and open to discussions!

Regards,
DataImpulse Support Team

On Wed, Apr 30, 2025 at 2:07=E2=80=AFAM DataImpulse Support Team <
support@dataimpulse.com> wrote:

> Hi there
>
> Thank you for reaching out to the DataImpulse Support Team!
>
> We highly appreciate the information provided and forwarded to our team.
>
> Best regards,
> DataImpulse Support Team
>
> On Wed, Apr 30, 2025 at 1:16=E2=80=AFAM Mark Polyakov <mark@markasoftware=
.com>
> wrote:
>
>> I discovered that it's possible to access 192.168.0.1 through your
>> proxies. Tested with HTTP proxies in sticky mode.
>>
>> This is a major issue because 192.168.0.1 is usually a router login page
>> on residential networks, so any customer of DataImpulse can access the
>> routers of random residential networks, and possibly change router setti=
ngs
>> maliciously.
>>
>> I attached a screenshot of a router I was able to log into through
>> DataImpulse; like many routers, it had a default username/password of
>> admin/admin.
>>
>> When you fix this:
>> (1) Be sure to block all reserved IPs
>> https://en.wikipedia.org/wiki/Reserved_IP_addresses
>> (2) Be sure to block domains that resolve to a reserved IP. I have been
>> testing other residential proxy providers as well, and many of them bloc=
k
>> 192.168.0.1 but if you access a domain name that resolves to 192.168.0.1
>> you can still access the router login pages.
>>
>> Best,
>> -- Mark Polyakov
>>
>>
>
> --
> Thanks,
> DataImpulse Support Team
>
>

--=20
Thanks,
DataImpulse Support Team

--00000000000062ea2f06341cd47d
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Greetings!<br><br>Earlier, you contacted us with the issue=
 detected. <br><br>Thank you for raising this matter!<br><br>We are constan=
tly looking for ways to improve our service, and your request has been take=
n into consideration.<br><br>Since your appeal, we have been working on fix=
ing it. The issue is now fixed, and as a thank you and bonus, we have provi=
ded 100 GB of traffic to your Residential plan.<br><br>Thank you for your i=
nterest in our service!<br><br>If you have any additional questions or sugg=
estions, don&#39;t hesitate to contact us. We are always in touch and open =
to discussions!<br><br><div style=3D"margin-top:0.5em;margin-bottom:0.5em">=
Regards,<br>DataImpulse Support Team</div></div><br><div class=3D"gmail_quo=
te gmail_quote_container"><div dir=3D"ltr" class=3D"gmail_attr">On Wed, Apr=
 30, 2025 at 2:07=E2=80=AFAM DataImpulse Support Team &lt;<a href=3D"mailto=
:support@dataimpulse.com">support@dataimpulse.com</a>&gt; wrote:<br></div><=
blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-l=
eft:1px solid rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr"><div dir=
=3D"ltr">Hi there<div><br></div><div>Thank you for reaching out to the Data=
Impulse Support Team!=C2=A0</div><div><br></div><div>We highly appreciate t=
he information provided and forwarded to our team.</div><div><br></div><div=
>Best regards,<br>DataImpulse Support Team=C2=A0</div></div></div><br><div =
class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Wed, Apr 30,=
 2025 at 1:16=E2=80=AFAM Mark Polyakov &lt;<a href=3D"mailto:mark@markasoft=
ware.com" target=3D"_blank">mark@markasoftware.com</a>&gt; wrote:<br></div>=
<blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-=
left:1px solid rgb(204,204,204);padding-left:1ex"><u></u><div><div style=3D=
"font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10pt"><div>I disc=
overed that it&#39;s possible to access 192.168.0.1 through your proxies. T=
ested with HTTP proxies in sticky mode.<br></div><div><br></div><div>This i=
s a major issue because 192.168.0.1 is usually a router login page on resid=
ential networks, so any customer of DataImpulse can access the routers of r=
andom residential networks, and possibly change router settings maliciously=
.<br></div><div><br></div><div>I attached a screenshot of a router I was ab=
le to log into through DataImpulse; like many routers, it had a default use=
rname/password of admin/admin.<br></div><div><br></div><div>When you fix th=
is:<br></div><div>(1) Be sure to block all reserved IPs <a href=3D"https://=
en.wikipedia.org/wiki/Reserved_IP_addresses" target=3D"_blank">https://en.w=
ikipedia.org/wiki/Reserved_IP_addresses</a><br></div><div>(2) Be sure to bl=
ock domains that resolve to a reserved IP. I have been testing other reside=
ntial proxy providers as well, and many of them block 192.168.0.1 but if yo=
u access a domain name that resolves to 192.168.0.1 you can still access th=
e router login pages.<br></div><div><br></div><div>Best,<br></div><div>-- M=
ark Polyakov<br></div></div><br></div></blockquote></div><div><br clear=3D"=
all"></div><div><br></div><span class=3D"gmail_signature_prefix">-- </span>=
<br><div dir=3D"ltr" class=3D"gmail_signature"><div dir=3D"ltr">Thanks,<div=
><div>DataImpulse Support Team</div><div><br></div></div></div></div>
</blockquote></div><div><br clear=3D"all"></div><div><br></div><span class=
=3D"gmail_signature_prefix">-- </span><br><div dir=3D"ltr" class=3D"gmail_s=
ignature"><div dir=3D"ltr">Thanks,<div><div>DataImpulse Support Team</div><=
div><br></div></div></div></div>

--00000000000062ea2f06341cd47d--