Welcome to WebmasterWorld Guest from 54.147.44.13

Forum Moderators: Ocean10000 & incrediBILL & phranque

Message Too Old, No Replies

IP Address was just a single Dot.

ip address spoof

     
11:07 pm on Feb 15, 2014 (gmt 0)

Junior Member

joined:Jan 12, 2014
posts:95
votes: 0


IP Address was just a single Dot.

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.71 Safari/537.36

How would I go about blocking that?
5:38 am on Feb 16, 2014 (gmt 0)

Senior Member from US 

WebmasterWorld Senior Member lucy24 is a WebmasterWorld Top Contributor of All Time Top Contributors Of The Month

joined:Apr 9, 2011
posts:12700
votes: 244


What the bleep? Can you post the whole log entry? First and last, if there were multiples. I thought IP obfuscation was well-night impossible. Are you positive it wasn't a glitch in your own server?
10:54 am on Feb 16, 2014 (gmt 0)

Administrator

WebmasterWorld Administrator phranque is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Aug 10, 2004
posts:10542
votes: 8


you can hide the originating IP behind a proxy/gateway/tor/etc but if the final non-obfuscated IP is spoofed it cannot be used to successfully complete a TCP connection handshake sequence unless you have control of the network.
11:24 am on Feb 16, 2014 (gmt 0)

Senior Member from US 

WebmasterWorld Senior Member lucy24 is a WebmasterWorld Top Contributor of All Time Top Contributors Of The Month

joined:Apr 9, 2011
posts:12700
votes: 244


unless you have control of the network

phranque, was that the www equivalent of The phone call is coming from inside your own house? :)
1:08 pm on Feb 16, 2014 (gmt 0)

Senior Member

WebmasterWorld Senior Member wilderness is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Nov 11, 2001
posts:5408
votes: 2


The DOT is simply a PHP hiccup from the software that serves the logs.
It also happens occasionally with a dash-hyphen, or even an incomplete line.
9:47 pm on Feb 16, 2014 (gmt 0)

Junior Member

joined:Jan 12, 2014
posts:95
votes: 0


I should have looked at the logs before posting...

The ip is ovh.ca/ovh.net
It's a pest that sends lots of bots to my site.

ns4009583.ip-192-99-9.net - - [16/Feb/2014:14:55:30 -0600] "GET / HTTP/1.1" 200 4103 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/27.0.1453.110 Safari/537.36"