vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 4.x Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=245)
-   -   Administrative and Maintenance Tools - Duplicate IP Report by BOP5 (Checks for users sharing the same IP Addresses) VB3/VB4 (https://vborg.vbsupport.ru/showthread.php?t=282525)

BirdOPrey5 09-22-2013 03:37 AM

Quote:

Originally Posted by Bubble #5 (Post 2447170)
Is there a way to have it send an e-mail to the admin, instead of posting a thread?

Would be so much easier to manage, and would catch most peoples attention sooner.

An email option is a good suggestion I will try to add in a future version. The debate whether a post or email is better is just going to be personal preference. I like keeping records as posts since I have a forum for all sorts of automated reports- but I can certainly understand the desire to have it by email instead.

Quote:

Originally Posted by iraqiboy90 (Post 2447199)
Let's say;
- I have 200 users
- There are many duplicated IPs
- No more posts has been added or registration for a week.

then, does this mod create the same report 7 times?

ps. I have the gold version

In this respect the Gold and Free versions work the same.

Yes and no... The same posts will be re-reported if they are within the look back window of both reports, but each day that goes by the oldest duplicates will fall off the report. So if your post look back window is 7 days on the day 1 report you will see all duplicates in the last 7 days. But by day 4 you'll see only 3 days of duplicates as by your example there have been no duplicates for 4 days at that point.

Honestly... If you have all that many duplicates there's a problem... If your site is small then people are definitely using "Alter egos" - If you have a very busy site your look-back window would be a lot shorter, just because there are too many posts to query at once. So on a super busy forum I would image a look back window of only say 3 days instead of 7 or 30. A 3 day window means about 33% of the reports are new each night.

For example on my OT forum which has about 100 active members on any given day and maybe 300 unique members in a month, I do a post look-back of 7 days. After cleaning up all the initial multiple-accounts found by this mod, sometimes weeks go by with no duplicates reported- what is is just the occasional mobile users who wind up on the same IP.

Quote:

Originally Posted by iraqiboy90 (Post 2447207)
In other words; The same report 7 times....
Is there any option to exclude those numbers/IPs from showing on further reports if nothing new happens to them?

Whitelisting specific IPs or usernames are an option but no way to not show duplicates previously reported if they fall in the same look-back window.

I suppose you can edit the scheduled task to run once a week instead of every night, then set a look-back window of 7 days, so each time it runs it is completely fresh data that will only be reported once, but in that case you could go an entire week before being notified about a duplicate account.

Bubble #5 09-27-2013 01:08 AM

All of these reports are being moderated.

How do I stop them from being moderated?

Didn't see a setting...

djbaxter 09-27-2013 01:19 AM

Quote:

Originally Posted by Bubble #5 (Post 2448266)
All of these reports are being moderated.

How do I stop them from being moderated?

Didn't see a setting...

I have this installed on 4 forums. On one of them, I have the same problem - all posted reports are placed in moderation. I have checked, double-checked, and triple-checked all settings I can think of and I can't find anything different for the one with the moderated posts. Moreover, two of those forums are on the same server - one works without moderation; the other puts all reports into moderation.

I'm bewitched, baffled, and bewildered.

Even the add-ons in the two forums on the same server are largely the same. If anything, the one that works properly may have a few more add-ons.

Totally stumped.

Bubble #5 09-27-2013 03:41 AM

Sounds like a [S]bug[/S].... I mean, unspecified feature somewhere ;)


It does drive me crazy how it fills the moderation section up, and the weird thing is that it doesn't do it everyday. Some days it posts like it should :cool:

BirdOPrey5 09-27-2013 11:36 AM

It is anti-spam software moderating posts, either a 3rd party mod or if you have an Anti-Spam Service enabled in options.

If a 3rd party mod you should be able to whitelist the user who makes the posts.

djbaxter 09-27-2013 01:36 PM

Quote:

Originally Posted by BirdOPrey5 (Post 2448347)
It is anti-spam software moderating posts, either a 3rd party mod or if you have an Anti-Spam Service enabled in options.

If a 3rd party mod you should be able to whitelist the user who makes the posts.

I am the user making the posts (and an Admin) but none of my other posts get moderated.

BirdOPrey5 09-27-2013 02:02 PM

It's possible it doesn't like the IP address saved for the post and basing moderation decision on that. If you search the PHP file for

127.0.0.1

You can replace it with any ip address you want, see if that helps. If it does I will make it a user option.

Bubble #5 09-27-2013 04:40 PM

Quote:

Originally Posted by djbaxter (Post 2448352)
I am the user making the posts (and an Admin) but none of my other posts get moderated.

Same here djbaxter, which is how I first noticed the problem. It didn't make any sense that user ID 1 would be moderated :p I checked and I am using two spam mods; Spambot Stopper (https://vborg.vbsupport.ru/showthrea...pambot+stopper) and Spam-o-Matic (https://vborg.vbsupport.ru/showthrea...pambot+stopper). I have disabled Spambot Stopper to remove it from the equation, and when I looked through Spam-o-matic I did notice that it has a moderation feature, so I turned that off. I'll see if that helps.

thunderclap82 09-27-2013 06:57 PM

Any way to set this to check weekly? I looked in the scheduled tasks and it appears I can only do daily or monthly by choosing a specific date.

BirdOPrey5 09-27-2013 09:59 PM

There is a "Day of Week" option drop-down in the Scheduled Task editor.

thunderclap82 09-28-2013 12:38 AM

Quote:

Originally Posted by BirdOPrey5 (Post 2448452)
There is a "Day of Week" option drop-down in the Scheduled Task editor.

Doh! Missed that one right in front of me. Thanks!

spankaveli 09-30-2013 05:26 AM

I see a way to whitelist certain IPs but is there a way to whitelist IP blocks? (for example, the 166.x.x.x block since that is used by AT&T wireless?)

BirdOPrey5 10-01-2013 11:02 AM

Quote:

Originally Posted by spankaveli (Post 2448913)
I see a way to whitelist certain IPs but is there a way to whitelist IP blocks? (for example, the 166.x.x.x block since that is used by AT&T wireless?)

No, not at this time... Will look into adding that into a future version.

iraqiboy90 10-01-2013 03:57 PM

Quote:

Originally Posted by BirdOPrey5 (Post 2447209)
An email option is a good suggestion I will try to add in a future version. The debate whether a post or email is better is just going to be personal preference. I like keeping records as posts since I have a forum for all sorts of automated reports- but I can certainly understand the desire to have it by email instead.



In this respect the Gold and Free versions work the same.

Yes and no... The same posts will be re-reported if they are within the look back window of both reports, but each day that goes by the oldest duplicates will fall off the report. So if your post look back window is 7 days on the day 1 report you will see all duplicates in the last 7 days. But by day 4 you'll see only 3 days of duplicates as by your example there have been no duplicates for 4 days at that point.

Honestly... If you have all that many duplicates there's a problem... If your site is small then people are definitely using "Alter egos" - If you have a very busy site your look-back window would be a lot shorter, just because there are too many posts to query at once. So on a super busy forum I would image a look back window of only say 3 days instead of 7 or 30. A 3 day window means about 33% of the reports are new each night.

For example on my OT forum which has about 100 active members on any given day and maybe 300 unique members in a month, I do a post look-back of 7 days. After cleaning up all the initial multiple-accounts found by this mod, sometimes weeks go by with no duplicates reported- what is is just the occasional mobile users who wind up on the same IP.



Whitelisting specific IPs or usernames are an option but no way to not show duplicates previously reported if they fall in the same look-back window.

I suppose you can edit the scheduled task to run once a week instead of every night, then set a look-back window of 7 days, so each time it runs it is completely fresh data that will only be reported once, but in that case you could go an entire week before being notified about a duplicate account.

Problem is that at one time my forum was reporting the wrong IP of the users. It was instead reporting an internal IP, the same one for everyone, for almost 6-9 hours.

In this time, there has been created multiple posts, which is why my report is long and got to many post numbers in it.

Manually editing the IP (by removing them) from the DB (manually, I guess) will be lot of pain. Therefore I see that whitelisting that IP will be a better option, if there is no other option you can recommend.

regards

cshellworld 12-09-2013 06:57 PM

4.2.1 installed , thanks

Barcham 01-28-2014 12:28 AM

This is exactly what I've been needing. I am in the process of setting up a new board and I am certain that I am going to have some problems with some members of a former board I used to belong to. this will be a great help in tracking them down before they can cause problems!!!

Thank you so much!!!

MarkFL 07-20-2014 04:46 PM

Ever since I was promoted to global moderator at the site I now help administrate, I have been wanting something like this. Now I don't have to go on hunches and suspicions alone...this was easy to install and is easy to use (vBulletin 4.2.0 patch levels 3 & 4 and 4.2.1).

Great work, BOP5! :up:

5 star rating and nominated for MOTM.

mservis 10-02-2014 02:28 AM

Perfect.
installed in vBulletin 4.2.2 Patch Level 1

Working now

Greetings

Skyrider 10-02-2014 05:40 PM

This might be a bug (or missing feature) but.. Right now it looks like in ACP... posts IPs are getting compared with all IPs (post and registration ones) ... while registration IPs are getting compared ONLY with other registration IPs.

For example at our "Boo" user and another profile using same IP.

Quote:

That's what it looks like given that when looking at Boo, you can find the other acount via the post IP, even tho the other account used that IP as registration
Is this an issue?

BirdOPrey5 10-02-2014 11:21 PM

Quote:

Originally Posted by Skyrider (Post 2517448)
This might be a bug (or missing feature) but.. Right now it looks like in ACP... posts IPs are getting compared with all IPs (post and registration ones) ... while registration IPs are getting compared ONLY with other registration IPs.

For example at our "Boo" user and another profile using same IP.



Is this an issue?

I'm may not be fully understanding the question- but looking at the SQL query it is clear the only IP addresses being checked in the posts report are the post IP addresses. It would be impossible for that query to check against registration IPs as those IPs are never returned/mentioned in the query.

If "Boo" is being returned in the post report it means the other username returned with boo has also posted posts with the same IP boo has posted from during the report period.

Skyrider 10-03-2014 04:27 PM

Quote:

Originally Posted by BirdOPrey5 (Post 2517475)
I'm may not be fully understanding the question- but looking at the SQL query it is clear the only IP addresses being checked in the posts report are the post IP addresses. It would be impossible for that query to check against registration IPs as those IPs are never returned/mentioned in the query.

If "Boo" is being returned in the post report it means the other username returned with boo has also posted posts with the same IP boo has posted from during the report period.

I'll give an example.

We currently found 2 forum profiles, of which we are sure that they are the same person, but the duplicate IP report isn't showing it in the report.

I'll replace Boo with Person A and the other profile with Person B.

Person A has a post count of 0, and the registration IP address in the AdminCP (of the profile) is 123.456.789 (not showing real IP address for obvious reasons). When I check his IP address through the AdminCP, it shows:

Registration IP Address - 123.456.789
Post IP Addresses - No Matches Found
Registration IP Addresses - No Matches Found

Awesome, lets continue!

Now, when I look at Person B

Has 3 post counts, and the registration IP address in the AdminCP is 987.654.321

Now, you can see that Person A and Person B don't have a matching IP address. However, when I use the AdminCP to View the IP address of Person B.

Registration IP Address - 987.654.321
Post IP Addresses - 123.456.789 [Find More Users with this IP Address]

Clicking "[Find More Users with this IP Address]" results in:

123.456.789 [host information here]

Post IP address:
Person B 123.456.789

Registration IP address:
Person A 123.456.789

As you can see. Person B with 3 posts, at least used the Post IP address of person A once. I can't find any IP reports from user A, but when I search through the IP results of Person B, I can find Person A.

I was wondering if this plugin can be extended a little bit so it can include the registration/post IP address match, regardless if it cannot be found in 1 profile, but can be found through another.

Hope you understand it a bit now.

(in this example I might have switched the IP's, 123 with 987 at the end. If that's the case, just swap them). Was using 2 example IP addresses and it is possible I mixed them up with one and other. But I think you'll get the general idea.

BirdOPrey5 10-04-2014 09:40 AM

Oh, I did misunderstand. I thought you were reporting a bug because registration IPs were not only being checked against registration IPs...

Indeed it was by design registration IPs only check against other registration IPs and post IPs only check against other post IPs.

You want a report that checks across both...

Unfortunately that was not an intended option and it is not something I will be adding- it would be a more difficult query and honestly one I think would be of limited use- as is these queries can take a big hit on the server- making them more complex will increase the chance of timeout/db errors.

Sorry.

If I had an idea I'd give you a hint on how to make the change yourself- the query code is in the php file- but I'm not sure how to go about combining the two- as is these were about as complex a mysql query I can handle.

Amenadiel 11-08-2014 04:10 PM

+1 for supporting wildcards and or IP blocks in the IP whitelist field. I want to add Cloudflare's IP ranges.

Kesha 11-08-2014 04:58 PM

Hey BOP!

I just installed your mod and I'm currently attempting to run it from the Admin CP (Options section) to try it out. I have a private forum set up, which is only accessible by Moderators and Admins. The issue is, when I click the Run Now button, the resulting page is simply "Duplicate IP Report by BOP5" followed by the word "Done" on a new line.

I saw a similar issue in this thread by another user so I decided to try some of what you asked him to do, with no luck. (disabling the Spam-O-Matic plugin, setting days to check to 1 & 1, etc.)

MySQL Version is 5.5.40-0ubuntu0.14.04.1, and PHP version is 5.5.9-1ubuntu4.5.

The forum itself is a large forum. Over 100,000 accounts are registered and over 1.9 million posts are in the database.

Any suggestions?

EDIT: Just figured it out... Apparently, the file that I uploaded did not have the correct permissions. After setting +rw on the file, it runs as promised and this mod runs now. Sorry about that!

BJJBJ 11-14-2014 09:43 AM

Quote:

Originally Posted by Kesha (Post 2521962)
Hey BOP!

I just installed your mod and I'm currently attempting to run it from the Admin CP (Options section) to try it out. I have a private forum set up, which is only accessible by Moderators and Admins. The issue is, when I click the Run Now button, the resulting page is simply "Duplicate IP Report by BOP5" followed by the word "Done" on a new line.

I saw a similar issue in this thread by another user so I decided to try some of what you asked him to do, with no luck. (disabling the Spam-O-Matic plugin, setting days to check to 1 & 1, etc.)

MySQL Version is 5.5.40-0ubuntu0.14.04.1, and PHP version is 5.5.9-1ubuntu4.5.

The forum itself is a large forum. Over 100,000 accounts are registered and over 1.9 million posts are in the database.

Any suggestions?

EDIT: Just figured it out... Apparently, the file that I uploaded did not have the correct permissions. After setting +rw on the file, it runs as promised and this mod runs now. Sorry about that!

I've got the exact same problem as above but his fix didn't work.

BirdOPrey5 11-14-2014 04:35 PM

Quote:

Originally Posted by BJJBJ (Post 2522670)
I've got the exact same problem as above but his fix didn't work.

If you are having issue with the Gold version (the free one doesn't have Admin CP interface) please post in the mod thread on qapla.com or PM me on Qapla.com- I can't provide support for the paid mod here on vbulletin.org.

Kesha 11-15-2014 04:17 PM

Just wanted to provide another update. I've had a chance to install and use this mod now, and let me just say that it works surprisingly well with my forum (being a larger forum). The only thing that I wish this modification had, is a duplicate account checker upon registration (with similar style alerts as this mod) but for the price I paid (nothing), this mod does it all for me.

Thank you kindly to BOP5 for this wonderful mod.

BirdOPrey5 11-15-2014 05:15 PM

Quote:

Originally Posted by Kesha (Post 2522821)
Just wanted to provide another update. I've had a chance to install and use this mod now, and let me just say that it works surprisingly well with my forum (being a larger forum). The only thing that I wish this modification had, is a duplicate account checker upon registration (with similar style alerts as this mod) but for the price I paid (nothing), this mod does it all for me.

Thank you kindly to BOP5 for this wonderful mod.

Thanks for the kind words. I couldn't "Like" this post because I liked an earlier one. But to your "wishes" if someone registers with an IP address already used (and within the time window specified) they will show up in the report the next say.

If you wanted to actually prevent someone with the same IP from registering again that is possible with the Recent Registration Check mod which is free with the purchase of the paid version of this mod. It doesn't make a report, just blocks the registration (or moderates it) based on your settings.

Snowhog 01-17-2015 08:33 PM

The mod posts the report to a specified Forum. I'd like to be able to choose between posting to a Forum or sending the report to an email address.

Faskis 01-01-2016 05:32 PM

I've found that the scheduled task for this only runs if done manually, but does not run at the scheduled time (it does list a future date/time). I can't find anything about it in the error logs. Any help would be appreciated.

MarkFL 01-01-2016 07:06 PM

Quote:

Originally Posted by Faskis (Post 2561624)
I've found that the scheduled task for this only runs if done manually, but does not run at the scheduled time (it does list a future date/time). I can't find anything about it in the error logs. Any help would be appreciated.

I have this set to run on the first day of each month, and it has always done so without fail.

Any additional information regarding how you have the product scheduled to run will be helpful to the mod author when providing support. :)

CAG CheechDogg 01-01-2016 07:32 PM

It also runs as it should for me ...

the one 01-02-2016 01:32 PM

Works great for me

Faskis 01-02-2016 04:23 PM

Quote:

Originally Posted by MarkFL (Post 2561637)
I have this set to run on the first day of each month, and it has always done so without fail.

Any additional information regarding how you have the product scheduled to run will be helpful to the mod author when providing support. :)

I have it set to run at midnight each day at the moment. Next runtime is listed as 1/3/2016 @ 12:00AM. This is how the settings look at the moment: http://puu.sh/mh58u/49266da7d2.png


The scheduled task log only shows the 3 instances that I'd ran the task manually: http://puu.sh/mh5dD/ee096d632c.png



Any idea on how the scheduled tasks actually run? Does it cue the server to run a command-line instance of PHP to execute the task, via cron or whatever have you? I was thinking if it attempts to do something like a cURL request that maybe Cloudflare could be interfering with the connection (I had that issue recently with a script that I was working on).

BirdOPrey5 01-05-2016 02:02 PM

It adds a scheduled task to vBulletin's list of scheduled tasks that can be seen in the Admin CP under Scheduled Task Manager.

Like all scheduled tasks they are only triggered if there is regular traffic to the forum because they are initiated on a page load where the cronimage is triggered which is in the footer template.

If no one visits the site at night the task never gets triggered.

There is a window of course, if someone comes soon after it should trigger, but at some point it just won't trigger.

Try setting it to run during a busier time of the day on your forum perhaps.

Faskis 01-06-2016 02:14 AM

Quote:

Originally Posted by BirdOPrey5 (Post 2562023)
It adds a scheduled task to vBulletin's list of scheduled tasks that can be seen in the Admin CP under Scheduled Task Manager.

Like all scheduled tasks they are only triggered if there is regular traffic to the forum because they are initiated on a page load where the cronimage is triggered which is in the footer template.

If no one visits the site at night the task never gets triggered.

There is a window of course, if someone comes soon after it should trigger, but at some point it just won't trigger.

Try setting it to run during a busier time of the day on your forum perhaps.

On average, there are ~200 users active at anytime of the day, so I don't think that's the issue, but I'll go ahead and adjust it to run every 6 hours to see if any of those will work.


Edit: Forgot that the scheduled tasks don't work exactly like cron jobs do, so you can't specify multiple hours. I've adjusted it to a busier hour, however.

Hostboard 03-23-2020 05:24 PM

When IPV6 is detected and reported, if the code is like "colon" "D" a smile is displayed. Will need to disable smiles in the forums settings,


All times are GMT. The time now is 12:54 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01975 seconds
  • Memory Usage 1,860KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (18)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (2)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (37)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete