Art Andrews
11-17-2013, 04:54 PM
From time to time, I get an email from my forum titled "Suspicious Request"
It almost always pertains to someone trying to register on the site, but never really supplies enough information to know what the exact problem is or even what is generating this email. I did my research and only see two other people who have brought this up in the two threads linked below:
http://www.vbulletin.com/forum/forum/vbulletin-4/vbulletin-4-questions-problems-and-troubleshooting/3944266-suspicious-request
http://www.vbulletin.com/forum/forum/vbulletin-4/vbulletin-4-questions-problems-and-troubleshooting/423142-suspicious-request-cinput-register
Neither seemed to get answers on the source of the email although vBulletin indicated it was a plugin and not the core software. One person thought it was cPanel, but that isn't the case because we don't run cPanel.
The content of a typical email looks something like this:
Cinput: register
Forum: http://www.therpf.com
IP: 183.160.121.253
User-agent: Mozilla/5.0 (Windows NT 5.1; rv:21.0) Gecko/20100101 Firefox/21.0
Request: /?page=login&cmd=register
User: Unregistered
GET: array (
'page' => 0,
'cmd' => 'register',
'pagenumber' => 0,
)
POST: array (
'ajax' => NULL,
)
COOKIE: array (
'bb_lastvisit' => 1384691004,
'bb_sessionhash' => '7ee094053fd45c1989c8e41c6f80afb7',
'PHPSESSID' => 'vh8f9aq3v5t6p2gpu0mf2kdoc0',
'bb_lastactivity' => 0,
'vbulletin_collapse' => NULL,
'bb_referrerid' => NULL,
'bb_userid' => NULL,
'bb_password' => NULL,
'bb_threadedmode' => NULL,
'bb_userstyleid' => NULL,
'bb_languageid' => NULL,
'bb_skipmobilestyle' => NULL,
'bb_fbprofilepicurl' => NULL,
'bb_forum_view' => NULL,
'vbulletin_sidebar_collapse' => NULL,
)
We use a number of plugins, but I can't find any that seem to be responsible for these emails. Does anyone have any idea what is generating them?
It almost always pertains to someone trying to register on the site, but never really supplies enough information to know what the exact problem is or even what is generating this email. I did my research and only see two other people who have brought this up in the two threads linked below:
http://www.vbulletin.com/forum/forum/vbulletin-4/vbulletin-4-questions-problems-and-troubleshooting/3944266-suspicious-request
http://www.vbulletin.com/forum/forum/vbulletin-4/vbulletin-4-questions-problems-and-troubleshooting/423142-suspicious-request-cinput-register
Neither seemed to get answers on the source of the email although vBulletin indicated it was a plugin and not the core software. One person thought it was cPanel, but that isn't the case because we don't run cPanel.
The content of a typical email looks something like this:
Cinput: register
Forum: http://www.therpf.com
IP: 183.160.121.253
User-agent: Mozilla/5.0 (Windows NT 5.1; rv:21.0) Gecko/20100101 Firefox/21.0
Request: /?page=login&cmd=register
User: Unregistered
GET: array (
'page' => 0,
'cmd' => 'register',
'pagenumber' => 0,
)
POST: array (
'ajax' => NULL,
)
COOKIE: array (
'bb_lastvisit' => 1384691004,
'bb_sessionhash' => '7ee094053fd45c1989c8e41c6f80afb7',
'PHPSESSID' => 'vh8f9aq3v5t6p2gpu0mf2kdoc0',
'bb_lastactivity' => 0,
'vbulletin_collapse' => NULL,
'bb_referrerid' => NULL,
'bb_userid' => NULL,
'bb_password' => NULL,
'bb_threadedmode' => NULL,
'bb_userstyleid' => NULL,
'bb_languageid' => NULL,
'bb_skipmobilestyle' => NULL,
'bb_fbprofilepicurl' => NULL,
'bb_forum_view' => NULL,
'vbulletin_sidebar_collapse' => NULL,
)
We use a number of plugins, but I can't find any that seem to be responsible for these emails. Does anyone have any idea what is generating them?