Contact Form IP and User Info Issue

If you have questions about using mojoPortal, you can post them here.

You may want to first review our site administration documentation to see if your question is answered there.

This thread is closed to new posts. You must sign in to post in the forums.
2/6/2011 10:47:47 PM
Gravatar
Total Posts 22

Contact Form IP and User Info Issue

Hello Mojo,

I know that forms online will always be subject to attempts to spam them.

That said, I do have recaptcha operating.

In the last two days, I have received a couple posts of porn messages.
In the past, when this starts it ramps up rather quickly.

Checking my server logs, I have ip addresses from all over, including a handful from India and China which are always suspect in my opinion.

I have not determined a method for connecting Contact Form submission to those IP's.

I suppose that I would have implemented my own script to capture data, but...

I have been depending on the fact that IP info is collected during the form submission.
Which brings me to the point.

a.) I receive emails with HTTP_USER_AGENT and IP info.
b.) I can click on View Messages on the top of contact form and see the message with same IP data...

However all ip addresses are the same... I believe the server my site is on.
Can you direct me on how to correct this?
I could not find any setting within MojoPortal to adjust this.

The following is the User Data on the last sets of folks which I know several of them to be from Arizona, Washington, Texas, Florida.

Any help is appreciated.

-Scott

HTTP_USER_AGENT: Mozilla/4.0
(compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322; FDM)
REMOTE_HOST: 172.16.10.120
REMOTE_ADDR: 172.16.10.120
LOCAL_ADDR: 172.16.11.80

HTTP_USER_AGENT: Mozilla/5.0
(Windows NT 5.1; U; en) Opera 8.00
REMOTE_HOST: 172.16.10.120
REMOTE_ADDR: 172.16.10.120
LOCAL_ADDR: 172.16.10.105

HTTP_USER_AGENT: Mozilla/4.0
(compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
REMOTE_HOST: 172.16.10.120
REMOTE_ADDR: 172.16.10.120
LOCAL_ADDR: 172.16.10.105

HTTP_USER_AGENT: Mozilla/5.0
(Windows; U; Windows NT 6.0; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 (.NET CLR 3.5.30729)
REMOTE_HOST: 172.16.10.120
REMOTE_ADDR: 172.16.10.120
LOCAL_ADDR: 172.16.10.90

HTTP_USER_AGENT: Mozilla/4.0
(compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; InfoPath.2)
REMOTE_HOST: 172.16.10.120
REMOTE_ADDR: 172.16.10.120
LOCAL_ADDR: 172.16.10.105

HTTP_USER_AGENT: Mozilla/4.0
(compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; MRSPUTNIK 2, 3, 0, 228; GTB6.6; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.1)
REMOTE_HOST: 172.16.10.120
REMOTE_ADDR: 172.16.10.120
LOCAL_ADDR: 172.16.10.109

HTTP_USER_AGENT: Mozilla/5.0
(Windows; U; Windows NT 5.1; en-US; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12 (.NET CLR 3.5.30729)
REMOTE_HOST: 172.16.10.120
REMOTE_ADDR: 172.16.10.120
LOCAL_ADDR: 172.16.11.80

HTTP_USER_AGENT: Mozilla/5.0
(compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)
REMOTE_HOST: 172.16.10.120
REMOTE_ADDR: 172.16.10.120
LOCAL_ADDR: 172.16.11.80

 

 

2/7/2011 2:24:41 PM
Gravatar
Total Posts 18439

Re: Contact Form IP and User Info Issue

Hi,

The Contact Form does include the remote ip address for this purpose so you can ban the ip address of repeat spammers.

If you are seeing always the same remote ip address then either all those users are really coming from that ip address or you have some kind of proxy server in front of your web server that makes it look like they all come from the same ip address. If that s the case I guess you would need to review the proxy server logs to get the real ip addresses to ban.

You can ban ip addresses either from your firewall or mojoPortal can block them, see Administration > Advanced Tools > Banned IP Addresses

Hope it helps,

Joe

2/7/2011 3:46:16 PM
Gravatar
Total Posts 22

Re: Contact Form IP and User Info Issue

Hello Mojo,

Thank you for following up.

In the past, I have been hit with people spamming my contact forms.  For that reason, I turned on reCaptcha, and was pleased that Mojo included ip of user.

While I don't know the difference in ip tags to explain, I do recognize that all show the same IP.

I am unable to determine from my logs, the particular IP of a give submitter on my home page.

I use RackSpace Moso Cloud.  Thus, their windows configuration may be part of the issue and can not be changed on their end.

That said, I have captured user ip on contact forms that I have built, on Mosso, both in .net and php enabling me to identify and ban users.

It also allows, if a contact form is used for Join Newsletter, for me to show proof of participation.

Can you share the filename or location I should look at that requests the ip address from user/host?

I can probably adapt and test.

Additionally, I have already tested a method, within MojoPortal instance which is getting and displaying true IP on same page as contact form, with the following external call:

<script type="application/javascript">
    function getip(json){
      document.write('Your IP Address is:');
      document.write(json.ip);
    }
</script>

<script type="application/javascript" src="http://jsonip.appspot.com/?callback=getip"></script>

Example can be seen at: http://mlmsoftwarecentral.com

If you suggest that I edit the contact form to receive from this script, I will gladly do so.

As always, thank you for your assistance.

MojoPortal is fantastic!

-Scott

 

2/7/2011 7:25:26 PM
Gravatar
Total Posts 22

Re: Contact Form IP and User Info Issue

Hello Mojo,

New Info on the issue.

Mosso Cloud is the cause and the solution isn't to difficult, with a little direction.

With SSL
Request.ServerVariables("HTTP_X_FORWARDED_FOR")

Without SSL
Request.ServerVariables("HTTP_X_CLUSTER_CLIENT_IP")

Source:
Why does every visitor to my website have the same IP address?
http://cloudsites.rackspacecloud.com/index.php/Why_does_every_visitor_to_my_website_have_the_same_IP_address%3F
 

Can you direct me on where to make an edit in order to generate the IP addresses behind the cloud.

2/8/2011 8:38:10 AM
Gravatar
Total Posts 18439

Re: Contact Form IP and User Info Issue

So it sounds like you are behind some kind of proxy server. I can't promise to accommodate every possible custom hosting scenario, but I've added a config setting you can use after the next release of mojoPortal. You can put this in your user.config and after the next release of mojoPortal you should see the actual ip address

<add key="RemoteHostServerVariable" value="HTTP_X_CLUSTER_CLIENT_IP" />

the default value of course is REMOTE_HOST

Hope it helps,

Joe

 

You must sign in to post in the forums. This thread is closed to new posts.