Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Generic User Avatar

server-side "remote host" captures to track visitors


  • Please log in to reply
No replies to this topic

#1 ajetrumpet

ajetrumpet

  •  Avatar image
  • Banned Spammer
  • Member rank image
  • 625 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:46 PM

Posted 19 February 2021 - 03:51 AM

I use PHP a lot you guys, but this applies to all server langs.  here's an example of something I currently use in PHP to get visitor info:

$ip = gethostbyaddr($_SERVER['REMOTE_ADDR']);

and here are some example returns I am getting on one of my sites recently:

planetlab24.gino-research.net.in.tum.de
10.32.64.124
49.129.197.35.bc.googleusercontent.com
abts-north-dynamic-142.110.68.182.airtelbroadband.in
173-20-152-84.client.mchsi.com

can someone explain to me why PHP would return so many different variants when throwing out visitor info using that code?  obviously i can understand the google one, and a few others. but, given the info and insight on these pages: https://www.php.net/manual/en/function.gethostbyaddr.php , and https://www.php.net/reserved.variables.server , why are the returns so different for different people? why does PHP see all different kinds of things? is the cause the way the user’s server is configured? some identifying info OF the server? and what about reserved IPs? like the “10.xx…” one I listed above? I’ve seen hundreds from that pool, and other blocks of reserved ones, and they have never had alpha-chars included in their captures. it’s always only the IP numbers. there a reason for that? really, all I’m looking for is why I see what I see. anyone help? furthermore, does anyone know if other server-side languages like c#, python, ruby or any js frameworks return different results than PHP ever would?  I've written many languages in my day, and I assume that all those that operate on the server side for any given reason can return the same type of info that my PHP example here has given?  thanks.


Edited by ajetrumpet, 19 February 2021 - 04:10 AM.


BC AdBot (Login to Remove)

 





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users