Gerry_D intro and an idea...

[Gerry_D]

Hello all,
long story short...
one of my sites got hacked from Moscow Russia, lots of porn links etc..

Well I banned that IP range from ftp to my site but now since my connection is Verizon DSL, my IP is somewhat dynamic. I need to check mine over a few weeks to establish a range to allow me to FTP and further limit hackers.

It "would be a nifty tool", if you had a mini-log for your users that would allow them to review the IP they log in here from for a period of say 30 days.

I sure could use it and just possibly there could be others as well.

Cordially,
Gerry

[clanmills]

Gerry

You want a little program to run occasionally and log your IP address. Is that correct?

This is quite a simple matter. On UNIX/Mac you could write a cron script which would execute occasionally and write the IP to file. On windows, the scheduler (or at command) can do the job. The script to get the IP and log is only a few lines of code.

However if you're wanting a GUI which makes it all kind of beautiful and painless that would be some work. Making it cross platform is another complication. Qt is a very good framework to handle that. Sounds however like a good project for a CS student.

Can you elaborate your thoughts. Is a command-line thing enough or do you want a GUI?

Robin

[systemslave]

This may be what you are after since this a a vbulletin based board. http://www.vbulletin.org/forum/showthread.php?t=185874

[Gerry_D]

SystemSlave pointed out a good link and idea, but to elaborate for ClanMills and the possible incorporation of it on here.....

I'm sure there is already a log file kept within the system for when people log in here.

Not being a "web programmer" what I may suggest may or may not be possible, but I tend to think it would be. We used to routinely do something like this when monitoring parameters in ATE like input voltage levels or power supply output levels.

A script within the pages here that would read the log file looking for the particular user, capture the text lines for the previous 30 days for that user and make a temporary file on the system. Then a second script would purge everything from that text file that is NOT an IP address and make a temporary html document with a break after each IP address to send to the user requesting it. Immediately after the request was processed and sent, the system would of course purge the files.

Cordially,
Gerry

[wimiadmin]

That's a good idea Gerry. I'll run it by our programmer. I know our log files for WIMI are over 15GB's per day.

Perhaps we could incorporate the forum login with some private area on WIMI that would keep track of this. I don't want to do the vBulletin thing as it might bog down our server where the forum is hosted.

Definitely something for us to contemplate on this end though as I think that would be a valuable service.

[0siris]

Gerry, everyone,

Don't forget that there are dynamic DNS services out there for just this type of situation. I don't want to endorse them, because my brain is reminding me (correctly?) that there are known vulnerabilities with these services. One such service is DynDNS. Investigate for yourself, because I haven't used such a service in at least 3 years.

Basically, you download a small program to your machine, it contacts the service regularly with the current IP, and the service provides you a hostname that will pretty much always get you to the machine. That's the quick'n dirty "how" of it.