Question about SSH_CONNECTION
From: Neil (neil_at_m-nospam-logics.com)
Date: 05/30/04
- Previous message: Angus SC2: "OpenSSH home directory"
- Next in thread: Darren Tucker: "Re: Question about SSH_CONNECTION"
- Reply: Darren Tucker: "Re: Question about SSH_CONNECTION"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sun, 30 May 2004 16:06:06 -0400
I would really appreciate it if someone would explain this: a web page
at ip address a.b.c.d displays this with phpinfo:
_ENV["SSH_CONNECTION"] j.k.l.m 16586 w.x.y.z 22
_ENV["USER"] root
_ENV["LOGNAME"] root
Presumably, this means that root is logged in via SSH, from a machine at
ip address j.k.l.m (using his outbound port 16586), right?
But wouldn't the webhost's ip (a.b.c.d) normally appear instead of
w.x.y.z, or alternatively, what is the significance of w.x.y.z. appearing
instead of the website's a.b.c.d? (a.b.c.d and w.x.y.z are totally
different networks, in fact one allocated via LACNIC and the other via
APNIC).
Could a vpn connection appear this way, or could this be the result of
some very hacked routing (e.g. could the box at w.x.y.z be virtually
hosting a.b.c.d)?
Sorry for munging the ip's but this question involves a spammer's
operation and I'd prefer not to give away the game just yet.
Thanks.
- Previous message: Angus SC2: "OpenSSH home directory"
- Next in thread: Darren Tucker: "Re: Question about SSH_CONNECTION"
- Reply: Darren Tucker: "Re: Question about SSH_CONNECTION"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|