vb.org Archive
Page 8 of 13 « First 67 8 910 Last »
Show 40 post(s) from this thread on one page

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   Modification Graveyard (https://vborg.vbsupport.ru/forumdisplay.php?f=224)
-   -   Anti-Spam Options - Hostname or Useragent Registration Ban (https://vborg.vbsupport.ru/showthread.php?t=279110)

nhawk 03-21-2014 08:01 PM
Quote:
Originally Posted by Max Taxable (Post 2488800)
If you have it set to do the WHOIS check it might be returning the word "proxy."
That's what I thought at first, but it returns..

Hostname: monitor5.sucuri.net
NetName: LINODE-US <------- This is the important one

Max Taxable 03-21-2014 08:12 PM
Quote:
Originally Posted by nhawk (Post 2488801)
That's what I thought at first, but it returns..

Hostname: monitor5.sucuri.net
NetName: LINODE-US <------- This is the important one
Just so... Just so.

But, not finding that either when I search the list he said he is using.

Max Taxable 03-21-2014 08:16 PM
Quote:
Originally Posted by BadgerDog (Post 2488722)
What I don't understand, is why it's blocking a registration when there's no registration needed for this access?
If it attempts to register it will be blocked if it is on the list, otherwise nothing happens to it.

That it's using a i-phone as a UA seems strange to me. Using a spoof UA and trying to register aren't the behavior you would expect of a site monitor.

Again, the only way this mod fires is if a register attempt is made. It doesn't block anything else. It does not block access.

The key is, "Tried to register." Sucuri Verified Site Monitor is not blocked from access and it has no legitimate business loading the register page..

Max Taxable 03-21-2014 08:29 PM
Spammer botnets often infect systems such as these site monitors and verifiers. I believe this mod stopped a attempted bot registration. It did its job.

It did not restrict any other access by your site monitoring service. At all. I recommend you turn it back on.

You might ask Sucuri why their bot product is trying to register.

ozzy47 03-21-2014 08:43 PM
That is a legit sucuri IP address.

Doug, what do you have in your robots.txt file?

nhawk 03-21-2014 08:52 PM
As Max said, this add-on only triggers when someone tries to register. It doesn't prevent access to the site. It prevents registration.

So if securi attempted to register and either the hostname or useragent for the securi bot contained blocked information then the add-on did it's job. It blocked a registration, that's all. It didn't prevent access to the site.

Max Taxable 03-21-2014 08:53 PM
Quote:
Originally Posted by ozzy47 (Post 2488809)
That is a legit sucuri IP address.
Right, which means they are very likely infected and have some botnet zombie computers on their system. It's not at all unusual to see.

Point is, it has no business at all loading the register page or trying to register. This mod did its job.

And his site monitoring service is not blocked from the site. Just the register page, where it doesn't need to be.

I'd leave it.

nhawk 03-21-2014 08:56 PM
Max I wish I could like your posts multiple times, but C'est la vie :D

Max Taxable 03-21-2014 08:57 PM
Quote:
Originally Posted by nhawk (Post 2488815)
Max I wish I could like your posts multiple times, but C'est la vie :D
Me too, Just tried liking another of yours haha.

BadgerDog 03-21-2014 09:55 PM
Quote:
Originally Posted by nhawk (Post 2488799)
Without seeing your list (please DON'T post that in public), I don't know why it would have banned them. If you want, send me your list via PM and I'll have a look.

The other thing that could be in your list that is associated with that IP is 'LINODE'.

And check your hostname list too. Something might be in there.
PM's you with list, which is the one Ozz recommended... :)

Regards,
Doug


All times are GMT. The time now is 02:32 PM.
Page 8 of 13 « First 67 8 910 Last »
Show 40 post(s) from this thread on one page

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01323 seconds
  • Memory Usage 1,740KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (6)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 
Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 
Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete