Web Wiz Support and Community Forums : Forged IP address https://forums.webwiz.net/ Copyright (c) 2006-2013 Web Wiz Forums - All Rights Reserved. Sat, 11 Apr 2026 15:05:01 +0000 Sat, 20 Nov 2004 17:23:30 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 12.08 360 https://forums.webwiz.net/RSS_post_feed.asp?TID=12584 <![CDATA[Web Wiz Support and Community Forums]]> https://forums.webwiz.net/forum_images/web_wiz_forums.png https://forums.webwiz.net/ <![CDATA[Forged IP address : wrote:I thought they just...]]> https://forums.webwiz.net/forged-ip-address_topic12584_post69976.html#69976 Author: xeerex
Subject: 12584
Posted: 20 November 2004 at 5:23pm

Originally posted by wrote:

I thought they just see an 'IP logged' notification?


That is all they see, which tends to freak them out many times.
]]> Sat, 20 Nov 2004 17:23:30 +0000 https://forums.webwiz.net/forged-ip-address_topic12584_post69976.html#69976 <![CDATA[Forged IP address : only admin/Moderators are able...]]> https://forums.webwiz.net/forged-ip-address_topic12584_post69932.html#69932 Author: dj air
Subject: 12584
Posted: 20 November 2004 at 7:04am

only admin/Moderators are able to see Ip Addresses,
no one else can they see IP logged
]]> Sat, 20 Nov 2004 07:04:36 +0000 https://forums.webwiz.net/forged-ip-address_topic12584_post69932.html#69932 <![CDATA[Forged IP address : Would someone be able to tell...]]> https://forums.webwiz.net/forged-ip-address_topic12584_post69929.html#69929 Author: bims
Subject: 12584
Posted: 20 November 2004 at 6:30am

Quote
Would someone be able to tell me how to hide the IP addresses from everybody

Isn't this the default in 7.9? Can ordinary users see all IP addresses? I thought they just see an 'IP logged' notification?

]]> Sat, 20 Nov 2004 06:30:48 +0000 https://forums.webwiz.net/forged-ip-address_topic12584_post69929.html#69929 <![CDATA[Forged IP address : change lines 756 to 761 on the...]]> https://forums.webwiz.net/forged-ip-address_topic12584_post69841.html#69841 Author: dj air
Subject: 12584
Posted: 19 November 2004 at 5:20am

change lines 756 to 761 on the forum_posts.asp file from


 'If  the user is the admin or moderatir then display the authors IP
If  (blnAdmin OR blnModerator) AND strAuthorIP <> "" Then
Response.Write(" | " & strTxtIP & "  <ahref=""javascript:openWin('pop_up_IP_blocking.asp?IP= " &strAuthorIP & "&TID=" & lngTopicID  &"','move','toolbar=0,location=0,status=0,menubar=0,sc rollbars=1,resizable=1,width=425,height=425')""class=""smL ink"">" & strAuthorIP & "</a>")
       Else
          Response.Write(" | " & strTxtIPLogged)
            End If


to 



  'If  the user is the admin or moderatir then display the authors IP
   If  (blnAdmin) AND strAuthorIP <> "" Then
Response.Write(" | " & strTxtIP & "  <a href=""javascript:openWin('pop_up_IP_blocking.asp?IP= " &strAuthorIP & "&TID=" & lngTopicID  &"','move','toolbar=0,location=0,status=0,menubar=0,sc rollbars=1,resizable=1,width=425,height=425')""class=""smL ink"">" & strAuthorIP & "</a>")

      Else
        Response.Write(" | " & strTxtIPLogged)
            End If




Edited by dj air]]> Fri, 19 Nov 2004 05:20:41 +0000 https://forums.webwiz.net/forged-ip-address_topic12584_post69841.html#69841 <![CDATA[Forged IP address : Would someone be able to tell...]]> https://forums.webwiz.net/forged-ip-address_topic12584_post69834.html#69834 Author: delirium
Subject: 12584
Posted: 19 November 2004 at 12:09am

Would someone be able to tell me how to hide the IP addresses from everybody, including moderators, on web wiz forum. I would lke to set it up in such way that only admiistrator can view it.

Thank you

]]> Fri, 19 Nov 2004 00:09:48 +0000 https://forums.webwiz.net/forged-ip-address_topic12584_post69834.html#69834 <![CDATA[Forged IP address : /agree with dj air Spoofing...]]> https://forums.webwiz.net/forged-ip-address_topic12584_post69751.html#69751 Author: xeerex
Subject: 12584
Posted: 17 November 2004 at 2:56pm

/agree with dj air

Spoofing IP addresses isn't difficult at all. Heck, you can even spoof the MAC address of your NIC if you want..

Originally posted by wrote:

If any crawler is able to crawl the board with appropriate permissions


I've actually mod'ed one of my forums so that the IP tracking is on butonly admins have permissions to view it. This is mainly because theyfreak out even if it's just a message of "your ip is logged." /shakeshis head.

Remember, that bots can only crawl the same HTML code that the browserrenders. This is why search bots can index a forum but not if you havegroup or password protected content.
]]> Wed, 17 Nov 2004 14:56:20 +0000 https://forums.webwiz.net/forged-ip-address_topic12584_post69751.html#69751 <![CDATA[Forged IP address : someone probbabbly fakes the Ip...]]> https://forums.webwiz.net/forged-ip-address_topic12584_post69750.html#69750 Author: dj air
Subject: 12584
Posted: 17 November 2004 at 2:47pm

someone probbabbly fakes the Ip address. is easy to do.]]> Wed, 17 Nov 2004 14:47:36 +0000 https://forums.webwiz.net/forged-ip-address_topic12584_post69750.html#69750 <![CDATA[Forged IP address : Today, I had a user post a message...]]> https://forums.webwiz.net/forged-ip-address_topic12584_post69747.html#69747 Author: Vapor
Subject: 12584
Posted: 17 November 2004 at 2:04pm

Today, I had a user post a message from my IP address.  I'm on a cable connection which gives users a unique IP Address.  I run a hardware firewall, a software firewall, Norton AV, and I don't open attachments.  I scan routinely, including today.

I consider it unlikely that I have been "hacked", but I'll take what precautions I can to ensure that I have not.

It is my assumption currently that the posting IP address was forged, by a "bot"

The "user" set up a message on my board, then spammed Yahoo Finance to direct people to my board.  From there, they hoped to direct traffic to their site - there was a link in the message.

It's my assumption that this was an automated process.

Here is one Yahoo Finance link

Here is another

Here is a third

I'm sure there are more.  I've been using version 7.9 of the forum for approximately 1-2 weeks.  My IP address is the most prolific on the board with approx 3000 posts.  If any crawler is able to crawl the board with appropriate permissions, then this would be the most frequent IP address used within the last week.

The IP address that the person registered from is:  24.244.141.102

I track "latest IP address" and "registration IP address" silently in a seperate table.

That address has been banned, of course.

This is all that I can provide at this point as far as the anatomy of the attack goes. 

My forum admin name and password was changed, of course, and the version I am using is SQL Server.   

]]> Wed, 17 Nov 2004 14:04:37 +0000 https://forums.webwiz.net/forged-ip-address_topic12584_post69747.html#69747