Pre Firewall : Anti-DDos With Sytem Block

[ry215]

Features

- Anti DDos
- Anti Flood
- Anti Attack
- Anti Spam
- Anti Localhost
- Anti block IP diversity
.... many Fuction...

We are no have big money buy fiwall cissco, now use free it nice ... and we are only use software protect for some hacker stupid and normal.
Good hackers will have many ways to hackers, and our room was not. ;)
the high level hack no free time to undermine our site. you dont worry :D


I've lost a lot of time for the trial version
today i can get Final for all friend vb.org
many members from vietnam, have tried to use my mod
hope you and use it to prevent the risk from hackers. Hope you contribute more ideas and the errors so that it can be more perfect. :up:



You can download it, and test my mod :up:

verry big tim for develop it ;)


Not sure it is completed, the process of using a problem or idea, please give me, let it develop better

My english verry bad, i hope all understand me :D

All code can view source file td_firewall.php
decoder it :up:

Install

Step 1 - Upload all files/folders in folder "upload" into your forum root
Step 2 - Import XML file (as product): AdminCP > Plugin System > Manage Products > [Add/Import Product]

Update
May-08-2010 :
Thank Fungsten
+ FIX: Error displays a message "Warning your activities have been banned" When Sending a PM Contains Link.




Pls Mark Install (https://vborg.vbsupport.ru/vborg_miscactions.php?do=installhack&threadid=242034) My Mod
I have strength for code new mod :D

[borbole]

Nice work, well done. It will come in handy to a lot of users :)

[Xencored]

ry215 am a fan of your mods mate will tag for later !! Thanks

[your24hourstore]

i run media by 8way and it uses localhost i believe will this effect me hosting my own videos?

[robsta]

sql error !

[ry215]

sql error !

can u print screen for me see ???

[Alecsmith]

Interesting mod tagged for now :)

Thanks

[ellinofatsa]

thanks nice 5 stars

[vicelover]

very great mod.
tagged. five stars

[LouisB]

Looks good. Tagged for later :)

[Fungsten]

I just sent someone a PM with a link and it came up with "Warning your activities have been banned".

Why did that happen? False positive? TIA.

[your24hourstore]

i run media by 8way and it uses localhost i believe will this effect me hosting my own videos?


yea i think it would

[ry215]

I just sent someone a PM with a link and it came up with "Warning your activities have been banned".

Why did that happen? False positive? TIA.

can u print screen let me see it ???

[murratti]

we have cisco firewall protection but sometimes ,as well, sometimes it doesnt solve the problem...how can this mod protect all of those kind attack?

[wolfe]

locking my members out of site once active so turned off till you can fix it m8 ;)

[Fungsten]

can u print screen let me see it ???


https://vborg.vbsupport.ru/attachment.php?attachmentid=116802&d=1273244468

[edenx]

Any chance for a 3.8 version?

[tafreeh]

how does it work ?

[sulasno]

tagged and thanks

[ry215]

Any chance for a 3.8 version?

i think it use for vb3.8 OK

how does it work ?

you can view file tdfiwall.php :up:

[ry215]

we have cisco firewall protection but sometimes ,as well, sometimes it doesnt solve the problem...how can this mod protect all of those kind attack?

yes, cisco can firewall protection verry good
but my mod

not everyone has money to lean Sisco, because it is very expensive, I only support the mod for less money, and I stated it is not 100% sure, but need more opinions to it better, you can view source for details :up:

[PjDaBadMan]

Nice man.. i cant wait until this is perfected

[ry215]

I just sent someone a PM with a link and it came up with "Warning your activities have been banned".

Why did that happen? False positive? TIA.

UPdate it again
i fix finish :up: thank u :up:

[hilfe-forum]

Uninstall

It block all Spiders like google yahoo msn...
It?s a SEO GAU ;)
Using this will lost all users from Google

[ry215]

let me check it, and fix
thank hilfe - forum

[Da-Vinci]

Were can I change the messages?

[ry215]

open file tdfiwall.php
change from it T_T
in adminCP you download kxdebug edit man

[hilfe-forum]

let me check it, and fix
thank hilfe - forum

:up:

THX ;)

[hotfilepro]

very good mod :D

[prevb]

yeahhh.. nice mod

[Fungsten]

It's baaaaack.


https://vborg.vbsupport.ru/attachment.php?attachmentid=116802&d=1273244468

[ry215]

i will update more it...

[nextslit]

Uninstall

It block all Spiders like google yahoo msn...
It?s a SEO GAU ;)
Using this will lost all users from Google

that is correct.

[ALBCODERS]

Works good but changes style and forum width.

[ftadirect]

This has to have a option to not ban Admin, SuperMOD, MOD, Registered User or any other registered member of the forum.

This is killing off my members and ME!!!! (ADMIN).

[argothiusz]

Great modification if you don't have any firewall plugin or modSecurity system on your dedicate server. At the same time, it's risky and have high potential to kill your traffic.

[Zachery]

vBulletin is not the correct place to try to stop a DDOS.

This should be done much earlier on the server, or by other physical hardware.

Great modification if you don't have any firewall plugin or modSecurity system on your dedicate server. At the same time, it's risky and have high potential to kill your traffic.
You should have better security in place, if you're relying on a modification, that relys on php and mysql being up. Chances are the DDOS is going to crash the machine before this addon can do anything about it.

[SuperTaz]

I agree with Zachary. This modification will not even get the chance to operate during a DDoS. You must have security hardware in place to stop such an attack on your boxes. This mod is only added protection for those who already have other hardware to minimize any attack.

[a4rb]

Thank you very much

[ry215]

i will update full version

[foudu1030]

Hello,
When I activate the hack it myself out error

Demo it's here :

[Kalgor]

There is a type of DDoS Attack I had recently, where the attacker used fake random IPs to constantly request the same page over and over again and made it look like thousands of guests were accessing the forum.

I managed to stop the attacks by getting their HTTP_USER_AGENT details and adding it to the .htaccess file.

Would be good to see something like this made more automated to deal with these sort of attacks against vBulletin forums.

[Zachery]

There is a type of DDoS Attack I had recently, where the attacker used fake random IPs to constantly request the same page over and over again and made it look like thousands of guests were accessing the forum.

I managed to stop the attacks by getting their HTTP_USER_AGENT details and adding it to the .htaccess file.

Would be good to see something like this made more automated to deal with these sort of attacks against vBulletin forums.
vBulletin is not the correct place to try to stop a DDOS.

This should be done much earlier on the server, or by other physical hardware.

[pedroenf]

Use this if you want to block DDOS attacks

http://deflate.medialayer.com

[FReeSTER]

Use this if you want to block DDOS attacks

http://deflate.medialayer.com

nice bro it work like charm

[mertiliuss]

works for vBulletin 3.8?

[Injustice]

When you put max visitors does it mean how many guests you want to have by max?

[Zachery]

I would not recomend this.

[Mikevet1984]

Can sb please explain what these option really are:

1. Interval: Time Keeping Requirements apart.

2. Requests Total Request For Links (Combined with interval)

These descriptions are not very clear to understand for newbies like me....

Please sb help and explain.

[RichieBoy67]

I would not recomend this.


Care to elaborate??

Thanks

[final kaoss]

Tell us then Zach, what would you recommend? Because I've been having problems with this type of issue for about 3 months now

http://vgchat.info/register.jpg

And here's even more proof.... over 19000 hits to the referral.php because of this issue... this month alone causing my site all kinds of horrible bounce rates..

Whatever can be done to deal with this, I'd like to know.


the GUESTS who try to access it don't have the posting permissions, so they get sent to the register.php page thanks to how vbulletin operates.

77.88.29.248 - - [18/Dec/2010:02:10:20 -0600] "GET /anime/2010/11/fight-night-round-3-pop-up-review-xbox-360-ps3/ HTTP/1.1" 200 11159 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
89.212.180.105 - - [18/Dec/2010:02:10:21 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26829 "http://vgchat.info/forum/register.php" "Opera/7.11 (Windows NT 5.1; U) [en]"
89.212.180.105 - - [18/Dec/2010:02:10:22 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26829 "http://vgchat.info/forum/register.php" "Opera/7.11 (Windows NT 5.1; U) [en]"
89.212.180.105 - - [18/Dec/2010:02:10:23 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26829 "http://vgchat.info/forum/register.php" "Opera/7.11 (Windows NT 5.1; U) [en]"
89.212.180.105 - - [18/Dec/2010:02:10:24 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26829 "http://vgchat.info/forum/register.php" "Opera/7.11 (Windows NT 5.1; U) [en]"
214.27.58.2 - - [18/Dec/2010:02:10:25 -0600] "GET /forum/cron.php?rand=1292659817 HTTP/1.1" 200 43 "http://vgchat.info/forum/forums/38-Super-Nintendo-Game-Genie-Codes-and-Pro-Action-Replay-Codes/page2?order=asc" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; InfoPath.2; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)"
89.212.180.105 - - [18/Dec/2010:02:10:25 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26829 "http://vgchat.info/forum/register.php" "Opera/7.11 (Windows NT 5.1; U) [en]"
66.249.71.152 - - [18/Dec/2010:02:10:37 -0600] "GET /forum/tags.php?tag=uncomfortable HTTP/1.1" 200 6829 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.71.152 - - [18/Dec/2010:02:10:40 -0600] "GET /forum/threads/3519-Madden-NFL-95-Hints-Tips?p=5751 HTTP/1.1" 200 10754 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
214.27.58.2 - - [18/Dec/2010:02:10:43 -0600] "GET /forum/forums/38-Super-Nintendo-Game-Genie-Codes-and-Pro-Action-Replay-Codes/page4?order=asc HTTP/1.1" 200 21513 "http://vgchat.info/forum/forums/38-Super-Nintendo-Game-Genie-Codes-and-Pro-Action-Replay-Codes/page2?order=asc" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; InfoPath.2; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)"
109.66.34.16 - - [18/Dec/2010:02:10:42 -0600] "GET /forum/tags.php?tag=revolution HTTP/1.0" 200 30721 "http://vgchat.info/forum/tags.php?tag=revolution" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Crazy Browser 2.0.0 Beta 1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
109.66.34.16 - - [18/Dec/2010:02:10:46 -0600] "GET /forum/register.php? HTTP/1.0" 200 18500 "http://vgchat.info/register.php?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Crazy Browser 2.0.0 Beta 1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
109.66.34.16 - - [18/Dec/2010:02:10:47 -0600] "POST /forum/register.php?do=checkdate HTTP/1.0" 200 26365 "http://vgchat.info/forum/register.php?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Crazy Browser 2.0.0 Beta 1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
214.27.58.2 - - [18/Dec/2010:02:10:48 -0600] "GET /forum/images/statusicon/thread_moved-30.png HTTP/1.1" 200 5563 "http://vgchat.info/forum/forums/38-Super-Nintendo-Game-Genie-Codes-and-Pro-Action-Replay-Codes/page4?order=asc" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; InfoPath.2; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)"
109.66.34.16 - - [18/Dec/2010:02:10:49 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26918 "http://vgchat.info/forum/register.php?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Crazy Browser 2.0.0 Beta 1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
214.27.58.2 - - [18/Dec/2010:02:10:50 -0600] "GET /forum/cron.php?rand=1292659843 HTTP/1.1" 200 43 "http://vgchat.info/forum/forums/38-Super-Nintendo-Game-Genie-Codes-and-Pro-Action-Replay-Codes/page4?order=asc" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; InfoPath.2; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)"
109.66.34.16 - - [18/Dec/2010:02:10:50 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26826 "http://vgchat.info/forum/register.php?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Crazy Browser 2.0.0 Beta 1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
66.249.71.152 - - [18/Dec/2010:02:10:52 -0600] "GET /forum/media/u2384-runescripts HTTP/1.1" 200 6700 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
109.66.34.16 - - [18/Dec/2010:02:10:51 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26826 "http://vgchat.info/forum/register.php?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Crazy Browser 2.0.0 Beta 1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
109.66.34.16 - - [18/Dec/2010:02:10:53 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26826 "http://vgchat.info/forum/register.php?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Crazy Browser 2.0.0 Beta 1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
109.66.34.16 - - [18/Dec/2010:02:10:54 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26826 "http://vgchat.info/forum/register.php?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Crazy Browser 2.0.0 Beta 1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
109.66.34.16 - - [18/Dec/2010:02:10:55 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26826 "http://vgchat.info/forum/register.php?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Crazy Browser 2.0.0 Beta 1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
66.249.71.152 - - [18/Dec/2010:02:10:55 -0600] "GET /forum/threads/136802-It-s-Almost-Tank-Time-In-Left-4-Dead-2?p=149122 HTTP/1.1" 200 10431 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
109.66.34.16 - - [18/Dec/2010:02:10:56 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26826 "http://vgchat.info/forum/register.php?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Crazy Browser 2.0.0 Beta 1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
109.66.34.16 - - [18/Dec/2010:02:10:58 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26826 "http://vgchat.info/forum/register.php?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Crazy Browser 2.0.0 Beta 1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
109.66.34.16 - - [18/Dec/2010:02:10:59 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26826 "http://vgchat.info/forum/register.php?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Crazy Browser 2.0.0 Beta 1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
109.66.34.16 - - [18/Dec/2010:02:11:00 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26826 "http://vgchat.info/forum/register.php?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Crazy Browser 2.0.0 Beta 1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
109.66.34.16 - - [18/Dec/2010:02:11:02 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26826 "http://vgchat.info/forum/register.php?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Crazy Browser 2.0.0 Beta 1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
109.66.34.16 - - [18/Dec/2010:02:11:03 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26826 "http://vgchat.info/forum/register.php?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Crazy Browser 2.0.0 Beta 1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
109.66.34.16 - - [18/Dec/2010:02:11:04 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26826 "http://vgchat.info/forum/register.php?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Crazy Browser 2.0.0 Beta 1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
109.66.34.16 - - [18/Dec/2010:02:11:06 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26826 "http://vgchat.info/forum/register.php?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Crazy Browser 2.0.0 Beta 1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
168.167.181.194 - - [18/Dec/2010:02:11:06 -0600] "GET /anime/2010/05/goku-and-undertaker-vs-superman-and-frieza-vs-vegeta-and-batman-vs-piccolo-and-spiderman/ HTTP/1.1" 200 11542 "http://www.google.co.bw/search?hl=en&source=hp&q=freeza+vs+vegeta+game&btnG=Google+Search&rlz=1W1SKPT_en&aq=f&aqi=&aql=f&oq=&gs_rfai=" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB6.6; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506; .NET CLR 1.1.4322)"
109.66.34.16 - - [18/Dec/2010:02:11:07 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26826 "http://vgchat.info/forum/register.php?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Crazy Browser 2.0.0 Beta 1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
168.167.181.194 - - [18/Dec/2010:02:11:08 -0600] "GET /anime/wp-content/themes/easel/style.css HTTP/1.1" 200 4400 "http://vgchat.info/anime/2010/05/goku-and-undertaker-vs-superman-and-frieza-vs-vegeta-and-batman-vs-piccolo-and-spiderman/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB6.6; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506; .NET CLR 1.1.4322)"
168.167.181.194 - - [18/Dec/2010:02:11:08 -0600] "GET /anime/wp-content/themes/easel/style-default.css HTTP/1.1" 200 771 "http://vgchat.info/anime/2010/05/goku-and-undertaker-vs-superman-and-frieza-vs-vegeta-and-batman-vs-piccolo-and-spiderman/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB6.6; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506; .NET CLR 1.1.4322)"
109.66.34.16 - - [18/Dec/2010:02:11:08 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26826 "http://vgchat.info/forum/register.php?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Crazy Browser 2.0.0 Beta 1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
168.167.181.194 - - [18/Dec/2010:02:11:09 -0600] "GET /anime/wp-includes/js/jquery/jquery.js?ver=1.4.2 HTTP/1.1" 200 24618 "http://vgchat.info/anime/2010/05/goku-and-undertaker-vs-superman-and-frieza-vs-vegeta-and-batman-vs-piccolo-and-spiderman/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB6.6; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506; .NET CLR 1.1.4322)"
109.66.34.16 - - [18/Dec/2010:02:11:09 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26826 "http://vgchat.info/forum/register.php?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Crazy Browser 2.0.0 Beta 1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
168.167.181.194 - - [18/Dec/2010:02:11:11 -0600] "GET /anime/wp-content/themes/easel/js/ddsmoothmenu.js?ver=3.0.2 HTTP/1.1" 200 2890 "http://vgchat.info/anime/2010/05/goku-and-undertaker-vs-superman-and-frieza-vs-vegeta-and-batman-vs-piccolo-and-spiderman/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB6.6; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506; .NET CLR 1.1.4322)"
168.167.181.194 - - [18/Dec/2010:02:11:11 -0600] "GET /anime/wp-content/themes/easel/js/menubar.js?ver=3.0.2 HTTP/1.1" 200 243 "http://vgchat.info/anime/2010/05/goku-and-undertaker-vs-superman-and-frieza-vs-vegeta-and-batman-vs-piccolo-and-spiderman/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB6.6; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506; .NET CLR 1.1.4322)"
109.66.34.16 - - [18/Dec/2010:02:11:11 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26826 "http://vgchat.info/forum/register.php?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Crazy Browser 2.0.0 Beta 1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
168.167.181.194 - - [18/Dec/2010:02:11:12 -0600] "GET /anime/wp-includes/js/comment-reply.js?ver=20090102 HTTP/1.1" 200 412 "http://vgchat.info/anime/2010/05/goku-and-undertaker-vs-superman-and-frieza-vs-vegeta-and-batman-vs-piccolo-and-spiderman/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB6.6; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506; .NET CLR 1.1.4322)"
178.120.110.179 - - [18/Dec/2010:02:11:12 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26788 "http://vgchat.info/forum/register.php" "Opera/9.00 (Windows NT 5.1; U; ru)"
168.167.181.194 - - [18/Dec/2010:02:11:12 -0600] "GET /anime/wp-content/plugins/fuzzy-seo-booster/seoqueries.css HTTP/1.1" 200 72 "http://vgchat.info/anime/2010/05/goku-and-undertaker-vs-superman-and-frieza-vs-vegeta-and-batman-vs-piccolo-and-spiderman/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB6.6; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506; .NET CLR 1.1.4322)"
109.66.34.16 - - [18/Dec/2010:02:11:12 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26826 "http://vgchat.info/forum/register.php?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Crazy Browser 2.0.0 Beta 1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
168.167.181.194 - - [18/Dec/2010:02:11:12 -0600] "GET /anime/index.php?ak_action=aktt_css&v=2.4 HTTP/1.1" 200 209 "http://vgchat.info/anime/2010/05/goku-and-undertaker-vs-superman-and-frieza-vs-vegeta-and-batman-vs-piccolo-and-spiderman/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB6.6; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506; .NET CLR 1.1.4322)"
168.167.181.194 - - [18/Dec/2010:02:11:13 -0600] "GET /anime/index.php?ak_action=aktt_js&v=2.4 HTTP/1.1" 200 - "http://vgchat.info/anime/2010/05/goku-and-undertaker-vs-superman-and-frieza-vs-vegeta-and-batman-vs-piccolo-and-spiderman/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB6.6; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506; .NET CLR 1.1.4322)"
168.167.181.194 - - [18/Dec/2010:02:11:13 -0600] "GET /anime/wp-content/themes/easel/images/1.gif HTTP/1.1" 200 329 "http://vgchat.info/anime/2010/05/goku-and-undertaker-vs-superman-and-frieza-vs-vegeta-and-batman-vs-piccolo-and-spiderman/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB6.6; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506; .NET CLR 1.1.4322)"
109.66.34.16 - - [18/Dec/2010:02:11:13 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26826 "http://vgchat.info/forum/register.php?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Crazy Browser 2.0.0 Beta 1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
1
178.120.110.179 - - [18/Dec/2010:02:11:14 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26788 "http://vgchat.info/forum/register.php" "Opera/9.00 (Windows NT 5.1; U; ru)"
168.167.181.194 - - [18/Dec/2010:02:11:15 -0600] "GET /anime/wp-content/themes/easel/images/4.gif HTTP/1.1" 200 270 "http://vgchat.info/anime/2010/05/goku-and-undertaker-vs-superman-and-frieza-vs-vegeta-and-batman-vs-piccolo-and-spiderman/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB6.6; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506; .NET CLR 1.1.4322)"
109.66.34.16 - - [18/Dec/2010:02:11:15 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26826 "http://vgchat.info/forum/register.php?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Crazy Browser 2.0.0 Beta 1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
168.167.181.194 - - [18/Dec/2010:02:11:15 -0600] "GET /anime/wp-content/themes/easel/images/whitetrans.png HTTP/1.1" 200 147 "http://vgchat.info/anime/2010/05/goku-and-undertaker-vs-superman-and-frieza-vs-vegeta-and-batman-vs-piccolo-and-spiderman/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB6.6; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506; .NET CLR 1.1.4322)"
168.167.181.194 - - [18/Dec/2010:02:11:16 -0600] "GET /anime/wp-content/themes/easel/images/calendar.png HTTP/1.1" 200 1096 "http://vgchat.info/anime/2010/05/goku-and-undertaker-vs-superman-and-frieza-vs-vegeta-and-batman-vs-piccolo-and-spiderman/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB6.6; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506; .NET CLR 1.1.4322)"
109.66.34.16 - - [18/Dec/2010:02:11:16 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26826 "http://vgchat.info/forum/register.php?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Crazy Browser 2.0.0 Beta 1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
168.167.181.194 - - [18/Dec/2010:02:11:17 -0600] "GET /anime/wp-content/themes/easel/js/scroll.js?ver=3.0.2 HTTP/1.1" 200 296 "http://vgchat.info/anime/2010/05/goku-and-undertaker-vs-superman-and-frieza-vs-vegeta-and-batman-vs-piccolo-and-spiderman/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB6.6; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506; .NET CLR 1.1.4322)"
168.167.181.194 - - [18/Dec/2010:02:11:14 -0600] "GET /anime/wp-content/themes/easel/images/background-wolfbw.jpg HTTP/1.1" 200 84859 "http://vgchat.info/anime/2010/05/goku-and-undertaker-vs-superman-and-frieza-vs-vegeta-and-batman-vs-piccolo-and-spiderman/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB6.6; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506; .NET CLR 1.1.4322)"
168.167.181.194 - - [18/Dec/2010:02:11:18 -0600] "GET /anime/wp-content/themes/easel/images/whitetranslow.png HTTP/1.1" 200 147 "http://vgchat.info/anime/2010/05/goku-and-undertaker-vs-superman-and-frieza-vs-vegeta-and-batman-vs-piccolo-and-spiderman/" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB6.6; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506; .NET CLR 1.1.4322)"
109.66.34.16 - - [18/Dec/2010:02:11:17 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26826 "http://vgchat.info/forum/register.php?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Crazy Browser 2.0.0 Beta 1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
109.66.34.16 - - [18/Dec/2010:02:11:19 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26826 "http://vgchat.info/forum/register.php?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Crazy Browser 2.0.0 Beta 1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
168.167.181.194 - - [18/Dec/2010:02:11:20 -0600] "GET /favicon.ico HTTP/1.1" 301 1 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB6.6; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506; .NET CLR 1.1.4322)"
109.66.34.16 - - [18/Dec/2010:02:11:20 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26826 "http://vgchat.info/forum/register.php?" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Crazy Browser 2.0.0 Beta 1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
178.120.110.179 - - [18/Dec/2010:02:11:20 -0600] "POST /forum/register.php?do=addmember HTTP/1.0" 200 26788 "http://vgchat.info/forum/register.php"


I would not recomend this.

[final kaoss]

and the last thing hostgator security told me was

Hello,

unfortunately there isn't a whole lot that can be done. Your domain has been spidered by a bot and at this time they are likely trying to spam the forum.

If I recall correctly vbulletin does have an addon or a function to block known abusive ip addresses and hosts.

Managing an issue like this really has few options of what could be done as there is no singular point of access.



Johnathan Sa.
Network Security

[Ariel Levinov]

its ok for vb 3.8.6 too?

[OldSchoolDSL]

I would not recomend this.

Care to explain more?

Tagged for future use.

[Shamil.]

I wonder what would happen to your forum if it blocked Google's bot?

I am not convinced by this extension modification. It is, however, a good idea.

[Ariel Levinov]

its ok for vb 3.8.6 too?

[RichieBoy67]

I wonder what would happen to your forum if it blocked Google's bot?

I am not convinced by this extension modification. It is, however, a good idea.

You will have none of your content indexed into Google.. In addition, if you run adsense your ads will only display the non profit free ones because Google will not be able to match the content..

I have not spent too much time reading about what this mod does but I don't think it is meant to block google bots..I could be wrong though..use your robots.txt for that..

[RichieBoy67]

Doublepost--sorry--Please delete mods

[Zachery]

Care to explain more?

Tagged for future use.
You're server is still going to get hammered but it will be delt with at the application level. This sort of thing needs to be delt with before PHP is getting involved, either @ the webserver with mod_doevasive for apache, or at the firewall level before the data even hits the webserver.

[Ariel Levinov]

ohhhhhhh plis answer me!
its ok for vb 3.8.6 too?

[OldSchoolDSL]

Thinking of installing this, but I'm wondering if there is a log / report of IP's which this ends up banning and if there is an "exclude" option.

[OldSchoolDSL]

You're server is still going to get hammered but it will be delt with at the application level. This sort of thing needs to be delt with before PHP is getting involved, either @ the webserver with mod_doevasive for apache, or at the firewall level before the data even hits the webserver.

Some web host configure these settings differently.

I would suspect the majority of vBulletin users are not all on VPS or Dedicated Servers and thus, do not have access to customize these settings.

[Ariel Levinov]

what problem to answer me?!!!!!!!!!!!!!!!!!!!!!
its ok to vb 3.8.6 or not?!

[OldSchoolDSL]

what problem to answer me?!!!!!!!!!!!!!!!!!!!!!
its ok to vb 3.8.6 or not?!

The way this plug-in works. It maybe risky.

As this modification was developed for 4.x .... It would be risky to try it on 3.8

But if you're willing to backup everything and try it. I'm sure there would be others here who would like your feedback.

[Shamil.]

You will have none of your content indexed into Google.. In addition, if you run adsense your ads will only display the non profit free ones because Google will not be able to match the content..

I have not spent too much time reading about what this mod does but I don't think it is meant to block google bots..I could be wrong though..use your robots.txt for that..

If the software blocks the bot at software level, robots.txt won't help you. I still suggest users use Google Webmaster Tools to monitor.

[intell_iut]

please explain more about any option in first post, with example
thanks

[DevOne5555]

In the short time I've been a sysadmin my forum has come under a number of DoS and DDoS attacks, some of them quite large. I use CSF (a WHM frontend for iptables), but it's been my experience that fighting flooding attempts will quickly overwhelm even the best software. Blocking illegitimate traffic syphons memory and bandwidth from legitimate traffic. I guess what I'm saying is software is a poor substitute for hardware. Even an entry-level $200 Cisco device has smarter, more efficient packet filters. you'd be hard-pressed to find any datacentre that doesn't have a firewall. My advice to other sysadmins is software is great, bu you need a second line of defense. If you get attacked, it's your host's responsibility to block the traffic at their routers. They're capable of it in most cases and if they can't or won't do it, leave and find a better host.

[DNN]

Good stuff. I'll try it!

[DNN]

do you have this in English?

[kskboy]

Dear Sir, Would you please make the setting for not to ban google boot for our site
Google ip ye de yazmak istersen
Google ip is 66**

[copjend]

It's compatible with VB 4.1.7?

[TheSupportForum]

i suggest not installing this mod

this will cause issues for your website

the firewall itself doesnt really protect you

- Anti DDos
- Anti Flood
- Anti Attack
- Anti Spam
- Anti Localhost
- Anti block IP diversity

Anti DDos and Anti Localhost is directed toward the webhost and not your website
all the above are just fancy words for you to download it, i suggest not installing it
as this can all be done via your hosting control panel like cpanel
this mod is a waste of time

if you really want sometine that will block registrations and spam, then i suggest this mod
https://vborg.vbsupport.ru/showthread.php?t=248042&highlight=glowhost

there are no extra files that record ip address its done within admincp and has losts of features
especially to change usergroup after they spam, giving you a chance to ban them and donate the IP address to
stopforumspam which in effect will help other

[GhostHunter2010]

installed this on vb 4.1.9 but there is problem if u send a pm link it blocks the pm or ban the user and i run media aswell wich it will efect the host anyways good work from u but not for me unistalled again

[datoneer]

When do i get response to my message, ha ry215? When?????

[shea is cool]

Really...? SOOO Many errors...

[Prorockz]

is there any Mod For vB 3??

[meckeenray]

Help Please ,

Is "5" fine at max visitors ? I dont know what's that

[Zachery]

Just don't use this addon.

[ForceHSS]

Just don't use this addon.

why?

[i3lack]

why?

Because limiting the number of visitors on your board would be stupid.. Why would you want a max of 5 visitors.. that means if the 6th visitor let's say you tries to connect he/she will not be able to because the slot is currently in use.. It's kind of like reserved slots on a teamspeak / vent server

[DefiantComplex]

Because limiting the number of visitors on your board would be stupid.. Why would you want a max of 5 visitors.. that means if the 6th visitor let's say you tries to connect he/she will not be able to because the slot is currently in use.. It's kind of like reserved slots on a teamspeak / vent server

You can easily disable this lol.

[Zachery]

It is pointless to run a "firewall" at the application level. you want to stop users before they get into your server, or even hit apache. Stopping users at the vBulletin/PHP level, they've already wasted your system resources.

[Nirjonadda]

Installed Version 4.0 , Latest Version 4.2.0 ? Please upload Latest Version 4.2.0, Can you add Usergroup Bypass Option? Enable For Specified Usergroups.

[ikymbo]

i want know if this mod work on Version 4.2.0

[RichieBoy67]

If the software blocks the bot at software level, robots.txt won't help you. I still suggest users use Google Webmaster Tools to monitor.

I'm sorry but I was responding to a question on what happens if this blocks google search bot.. If someones goal was to block search bots I would use another method but I cannot see why most sites would want to keep from getting indexed.

[faisaly.com]

maybe private , they don't want site indexed...

[RichieBoy67]

I said Most sites.. Most sites are public and not private.

I do not think this mod was intended to block bots and if it does it basically ruins it.

[rishimodi]

Hi,

when i am trying to import the xml i am getting the following massage:

A conflict was detected in the bitfields. You cannot continue with the installation of this product until this has been fixed. The conflicts found were:
Bitfield Collision: canwrtmembers = canpostvbookieevent

Thanks