2

I have a website where I keep logging the user entries. I found some anonymous entries in my table and I suspect they are using some kind of proxy switchers. How can I find the real source of these intruders?

5
  • I'm not familiar with the term "user entry", what are your referring to? It could be an entry in your log file or the entrance of a visitor into the site. Dec 19, 2013 at 10:40
  • What makes you think that these visitors are "intruders"? Are they somehow malicious? Almost all websites get anonymous visitors. Why would you expect to know who all your visitors are? Dec 19, 2013 at 10:41
  • @StephenOstermiller yes, i have a log which keeps user details like ip, user-agent etc. I found a number of suspicious ips from different locations of the world in a limited span of time, where my site is not meant for global users. So i suspect someone is using proxy switcher and trying to hack. Dec 19, 2013 at 13:02
  • Hackers also use bot-nets and other hacked web sites from around the world as their base for attacks. It doesn't have to be proxies. Dec 19, 2013 at 13:18
  • @StephenOstermiller Thanks for the info, but here i am looking for a solution to find out someone using a proxy switcher. Dec 21, 2013 at 9:11

2 Answers 2

2

If a user is using a proxy, there may be headers in the request that you could examine or log to let you know what the original IP address of the user is. See:

If you are using Apache server, headers such as this can be logged using %{header}i, in the log format configuration directive where "header" can be any HTTP request header.

1

Not really possible. You can try a few clever tricks that may or may not work (caching a flash object and checking for it to identify if a user is using multiple IPs, or carefully tracking several user details and looking for matches). It's better to just make sure the site is secure versus trying to track users at all.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.