Hi everyone,
My network il under a Pihole DNS resolver, and i just saw that my umbrel node is quite often talking to icanhazip.com.
Why the hell my umbrel node is seeking for my external ip ?
Could my node be compromised ?
Thank for your help
icanhazip has been a very common way to retrieve a public IP for some time now. While it can be a possibly malicious service, more often than not it is some 3rd party integration trying to collect data about usage (which is still not great). Shortly before you posted this icanhazip changed over to cloudflare and is still being maintained by them as the original serivce to discover the public facing IP via a web call. See more here: A new future for icanhazip · Major Hayden
TL;DR Some 3rd party dependency or service is likely using this for data collection. If you don’t use this service you can block the requests to that URL