Reply to: IP Address Logging

[TheMonkey]

I think that was only for a certain version of the JVM of explorer. If you do not use explorer or have the latest JVM I think this cannot occur (unless you specifically grant those rights to the applet).

Ahh they fixed that?

You can do it in flash anyway :P

[xoggoth]

Last year I caught out a bloke at work who sent me an email from the button on my website pretending to be a young woman who wanted to meet me for kinky sex. The machine address matched the sticker on the side of his machine. Doesn't work now unfortunately cos when I got forced to change hosting by the force of reaction due to stuff about shagging dead badgers I had to change from php to crappy perl.

It does not seem to work from home, that only gives my ISP address, something in way they had their network set up??

[Francko]

A java applet can load almost completely undetectably and read machine information (not much but enough to identify the machine), then report the data back to the web server by filling in form fields.

I think that was only for a certain version of the JVM of explorer. If you do not use explorer or have the latest JVM I think this cannot occur (unless you specifically grant those rights to the applet).

[AtW]

I was under a misapprehension that your local machine IP address was hidden if using a provider such as AOL, but obviously not.

AOL is notorious for using transparent proxies, the barstewards.

[TheMonkey]

Is that for me?

No.

[MarillionFan]

Thank you, that makes perfect sense. I was under a misapprehension that your local machine IP address was hidden if using a provider such as AOL, but obviously not. Therefore the server side script makes sense.

Cheers.

[AtW]

ISP assigns IP address to your route or machine if it's connected directly, technically speaking it is their IP address, they just leased it to you. When two computers talk to each other via TCP/IP they need to know each other's addresses otherwise packets won't reach destination, so if a proper connection established then both parties will know IP addresses.

It is possible to use a proxy server which would make request on your behalf - this will often not tell server what was the original IP, though proxies these days should be giving such hints. Anonymiser services exist to completely hide your IP (until they get busted and admin fingers get broken).

[MarillionFan]

Plus I freely admit Im struggling here, if its server side how does it get my ip address, i was under the impression only my ISP ip address could be seen.

[AtW]

Those in the know can determine your credit card and social security numbers from mere access to the website...

[MarillionFan]

So (quite happy to ask the master). What else can be found out?
Plus I freely admit Im struggling here, if its server side how does it get my ip address, i was under the impression only my ISP ip address could be seen.

[AtW]

I was just interested to how the REMOTE_ADDR was accessed when I couldnt see anything in the HTML.

Server side - available to pretty much any script

[MarillionFan]

Sorry I only stretch as far as basic HTML and Javascript when it comes to the web, rest of my skills are SQL, Oracle, SQL Server, VB, Crystal, Business Objects and then retail - you know practical paying skills.

I don't profess to be an expert on everything unlike some others on here.

Anyway Chubba, I am ok with the script you showed the link for, that shows the aol host I am connected through, not my machine.

I was just interested to how the REMOTE_ADDR was accessed when I couldnt see anything in the HTML.

(There you go AtW chance to splutter over your cold baked beans from the tin there).

[chubba]

Hey MF - the IP address is only shown if you click to pay you filthy little beasty!

Here is a little script you can embed in your own web pages if you so desire. Judging by the fact that you asked this question though I have a feeling you might have difficulty with the concepts of HTML and FTP.

http://www.hashemian.com/tools/visitor-IP.htm

[AtW]

Is that for me?

[TheMonkey]

God I assumed some knowledge.

Go read the TCP/IP specifications or get TCP/IP Illustrated volume 1 by Richard Stevens.