Re: IP spoof

Craig Vincent wrote: > > We run a link exchange that tracks unique IP's for display count and > > clicks. However I am almost positive that there are people cheating by > > feeding the system IP addresses and referrers. I am 99% sure people are > > doing it, the thing is how? I need to find out how to do it myself so I > > can implement counter measures against it. Is this something that can be > > done in PHP? > > Well there's thousands of public proxy servers out there...simply having a > script that uses those proxies to connect to your site with various > information is very easy. The trick to catching these people is to realize > that almost all of these people are pretty stupid when it comes to > programming....they just look for the easiest way to fool your system but > don't hit all the angles....doing additional checks like cookies or > javascript being enabled is a definate start. > > Then you can help single out crooks just based on averages...example...if > you record approx. 15% of incoming hits (overall) have javascript disabled > browsers...then you know if you find a guy who has 80% of his hits having > javascript disabled may be up to something...I have plenty of other ideas > from all the link exchange and affiliate programs I've designed but I can't > reveal all my trade secrets :) That should at least get you to think. > > Sincerely, > > Craig Vincent > ------------------------- > Senior Programmer > Jazzmonkey Media Inc. > http://www.jazzmonkey.com > ------------------------- > There are no browser involved, they are Hurling. They are using CGI/Perl scripts that generate random Ip addresses. It is a modified version of a password Hurler. You can buy the scripts that do it. I don't know if this guy has one, probably does. http://www.superscripts.com/ Gary