phpBB2Refugees.com Logo
Not affiliated with or endorsed by the phpBB Group

Register •  Login 

Continue the legacy...

Welcome to all phpBB2 Refugees!Wave Smilie

This site is intended to continue support for the legacy 2.x line of the phpBB2 bulletin board package. If you are a fan of phpBB2, please, by all means register, post, and help us out by offering your suggestions. We are primarily a community and support network. Our secondary goal is to provide a phpBB2 MOD Author and Styles area.

Private IP Addresses appearing in logs


 
Search this topic... | Search phpBB2 Discussion... | Search Box
Register or Login to Post    Index » phpBB2 Discussion  Previous TopicPrint TopicNext Topic
Author Message
JLA
Board Member



Joined: 30 Apr 2009

Posts: 298
Location: U.S.A


flag
PostPosted: Tue Jul 09, 2013 11:49 pm 
Post subject: Private IP Addresses appearing in logs

Curious - what scenarios would cause Private IP addresses

10.0.0.0 - 10.255.255.255
172.16.0.0 - 172.31.255.255
192.168.0.0 - 192.168.255.255

to appear in the Sessions table? Of course the obvious of browsing PHPBB from the same LAN as the servers would account for this - what about other possibilities?

Thanks

_________________
http://www.jlaforums.com
Back to top
StarWolf3000
Board Member



Joined: 10 Jun 2010

Posts: 83
Location: Stolpen, Saxony, Germany


flag
PostPosted: Wed Jul 10, 2013 12:50 pm 
Post subject: Re: Private IP Addresses appearing in logs

These IP ranges cannot be routed on the external networks like the internet. Maybe someone uses an obfuscation service and this service shows up as if it were in the private ranges. Never trust IP adresses and their connected DNS entries.
Back to top
JLA
Board Member



Joined: 30 Apr 2009

Posts: 298
Location: U.S.A


flag
PostPosted: Sat Jul 13, 2013 4:22 pm 
Post subject: Re: Private IP Addresses appearing in logs

StarWolf3000 wrote:
These IP ranges cannot be routed on the external networks like the internet. Maybe someone uses an obfuscation service and this service shows up as if it were in the private ranges. Never trust IP adresses and their connected DNS entries.


Yes, that was our thinking as well. One of the particular users that we noticed were appearing this way were showing a private lan block IP inside PHPBB but the firewall and server logs were showing their true internet IP. Do you think this was intentional behavior on the part of the user?

_________________
http://www.jlaforums.com
Back to top
Dog Cow
Board Member



Joined: 18 Nov 2008

Posts: 378


flag
PostPosted: Mon Jul 15, 2013 10:24 pm 
Post subject: Re: Private IP Addresses appearing in logs

JLA wrote:
Do you think this was intentional behavior on the part of the user?
Could be.

They'll never get a response from your server, but it is possible to forge the origin address.

_________________
Moof!
Lincoln's Tomb, Oak Ridge Cemetery, Springfield IL Mac 512K Blog Mac GUI
Back to top
JLA
Board Member



Joined: 30 Apr 2009

Posts: 298
Location: U.S.A


flag
PostPosted: Wed Jul 17, 2013 2:21 pm 
Post subject: Re: Private IP Addresses appearing in logs

Dog Cow wrote:
JLA wrote:
Do you think this was intentional behavior on the part of the user?
Could be.

They'll never get a response from your server, but it is possible to forge the origin address.


Thanks.

_________________
http://www.jlaforums.com
Back to top
Display posts from previous:   
Register or Login to Post    Index » phpBB2 Discussion  Previous TopicPrint TopicNext Topic
Page 1 of 1 All times are GMT
 
Jump to:  

Index • About • FAQ • Rules • Privacy • Search •  Register •  Login 
Not affiliated with or endorsed by the phpBB Group
Powered by phpBB2 © phpBB Group
Generated in 0.0180 seconds using 15 queries. (SQL 0.0021 Parse 0.0005 Other 0.0154)
phpBB Customizations by the phpBBDoctor.com
Template Design by DeLFlo and MomentsOfLight.com Moments of Light Logo