PDA

View Full Version : vb Community I need your help with IP


24hourForum.com
09-13-2008, 06:27 AM
I have two members claiming to be different people. Last month I banned 12 ip address and 6 accounts, which all belonged to one person. Who was trying to cheat others and myself on my forum. This month, i noticed two separate IPs have one thing in common... the search result on the ip says this:

This output has been filtered.
% To receive output for a database update, use the "-B" flag.

What does that mean? this output has been filtered? is someone using a service like HIDE MY IP?

217.169.211.14 - Whois Information
% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html

% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '217.169.211.12 - 217.169.211.15'

inetnum: 217.169.211.12 - 217.169.211.15
netname: GIMEL-2-NET
descr: SPR Gimelnet
country: CS
admin-c: VD776-RIPE
tech-c: VD776-RIPE
status: ASSIGNED PA
mnt-by: MEDIAWORKS-MNT
source: RIPE # Filtered

person: Vladimir Djuric
address: GIMELNET
address: SCG
e-mail: gimel@gimelnet.co.yu
e-mail: vladimir@gimelnet.co.yu
phone: +38163504039
nic-hdl: VD776-RIPE
source: RIPE # Filtered

troybtj
09-13-2008, 03:18 PM
That IP Block is in my border firewall rules as 'suspected proxy'. Don't know if that's any help for you or not. fail2ban (OS Level) has auto-banned 1 address in the group for attempting to login to system via ssh.

geoiplocator has no info for the IP, which isn't extremely common unless a recent IP Block transfer occured. No DNS info has been entered for the block yet, and from the output of a query, it doesn't look like they intend to, since I get this from the 'host' command in linux:

217.169.211.14 PTR record query refused

24hourForum.com
09-13-2008, 06:21 PM
Thanks