Ip Script

[pO Esoteric]

is there a script that can log peoples ips that come to your site so u can check them. someone keeps goign to my site and hacking it and i want to look at all the ips and find out who it is.

[mrdesignerperson]

the short answer: this won't be easy.
just flicking through google, all i've found are some sample perl scripts that would do it, and writing perl, although not overly copmlicated, is not something that you can learn in five minutes or overnight.

the "but": somebody out there may have written a standalone thing that you can download and bung in one of your directories, but it won't be too easy to find. if you know any scripting guru's, my suggestion is to ask them.

it's been a while since i wrote any perl code, and it would take me a few days to get back up to the standard that i would need to be at to write the script myself. :( sorry.

it is a fairly simple script, though, so ask a scripting guru if you know one. (or do a google search for the downloadable item.)

sorry i couldn't help more :(
hope it all works out for you

[Martin]

PHP could be your ticket...

http://www.phpscripts.com/item/23

or

http://www.4webhelp.net/scripts/php/ip.php

or

http://www.hotscripts.com/Detailed/28464.html

or perhaps even

http://www.pscode.com/vb/scripts/ShowCode.asp?txtCodeId=539&lngWId=8

[BadGuy]

Yah martin is right there although perl might be a bit more solid (cgi)

$_SERVER['REMOTE_ADDR']

that would get the IP in php.

A note:

Talking from hacking experience if this hacker is serious. An ip gotten from a connection to a server IS NOT necesseraly the IP the purpetrator is using! Which means as much as you might ban a complete ip-range also making potential non-malicious clients/users a victim of this other person's actions and driving away users.

Although on a lighter note. This person would probably be a m8 (this all depends on the site you run ofcourse! If it's a 'personal' site then you might want to take this part more seriously then the part above) and not having any kind of anonimity devices active.

Also you might want to see what a person that repetivly shows signs of abused and attempts to forced entry to parts he/she is not permitted to enter actually is trying to do. As in what file is being called on and where does it come from (what page). And see if you can detect a patern and see if there are security flaws along that path. If I had someone just trying to hack my site this is what I would do. Because the one hacking my site would have reason to believe there is a usable exploit in my server configuration or my php-code.

Legal actions. Like I said don't know what kind of site you are running. But taking legal steps is not something I would advice. As it is VERY hard to prove anything and also chances are quite big of the person using other computers to try and hack you. So it's pretty much impossible to get someone in court and it's even harder to get a conviction out of it all. Legal costs FAR out weigh the satisfaction of catching a perp.

My thoughts on hacking etc.

Getting an ip is nice but doesn't have any affect on a serious threat. Try and plug holes if any and otherwise the person will give up eventually.