I'm generally familiar with these kind of priv elevation attacks.

To clarify, by IP you mean the hash values associated with those IPs?