vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vB4 General Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=251)
-   -   Ban unregistered user by IP? (https://vborg.vbsupport.ru/showthread.php?t=273030)

Breakthecycle2 10-29-2011 05:14 PM
Ban unregistered user by IP?
 
I am getting bombarded by an IP address that has been associated with a hacker. I can't seem to figure out if there is a way to ban an IP address. Is there?

frupunch 10-29-2011 05:18 PM
yes there is...

in vbulletin option, select user banning option, then Banned IP Addresses.

then put the ip address you want to banned...

Breakthecycle2 10-29-2011 05:20 PM
Thanks!!

BTW, this is the IP address. Everyone should keep a look out in the logs!
204.236.226.210

ForceHSS 10-29-2011 05:44 PM
there are a few programs you can install to help with that if you need help pm me

Breakthecycle2 10-29-2011 05:51 PM
Quote:
Originally Posted by ForceHSS (Post 2262724)
there are a few programs you can install to help with that if you need help pm me
I have Glow Host, bad behavior and honeypot installed. Is there something else?

Breakthecycle2 10-31-2011 05:01 PM
Alright, well I banned the IP and they are still coming back. What else can I do?

huskermax 10-31-2011 08:29 PM
Quote:
Originally Posted by Breakthecycle2 (Post 2263210)
Alright, well I banned the IP and they are still coming back. What else can I do?
Require people who register go through one or all of these:

email verification

Admin approval (moderation)

Security questions.

I have email verification and security questions and I have yet to have a spammer get through.

Breakthecycle2 10-31-2011 09:50 PM
Quote:
Originally Posted by huskermax (Post 2263261)
Require people who register go through one or all of these:

email verification

Admin approval (moderation)

Security questions.

I have email verification and security questions and I have yet to have a spammer get through.
I have all that as well. It's not they are getting through, but as I said previously, this IP address is associated with a known hacker or hacker bot. I banned the IP, but they are still showing up up un my Glowhost blocked statistics.

nhawk 10-31-2011 10:01 PM
If you have access to a firewall in your site or server control panel. Block the IP with the firewall.

Breakthecycle2 10-31-2011 10:03 PM
Great. Blocked it through that. Let's see if that works now.

nhawk 10-31-2011 10:11 PM
Just an FYI, that IP is the spider for the wayback machine at www.archive.org

Max Taxable 11-01-2011 12:44 AM
Quote:
Originally Posted by Breakthecycle2 (Post 2262711)
Thanks!!

BTW, this is the IP address. Everyone should keep a look out in the logs!
204.236.226.210
That's not associated with a "hacker."

http://www.projecthoneypot.org/ip_204.236.226.210

Code:
204.236.226.210's User Agent Strings
ia_archiver (+http://www.alexa.com/site/help/webmasters; crawler@alexa.com)
ia_archiver (+http://www.alexa.com/site/help/webmasters; crawler@alexa.com),gzip(gfe),gzip(gfe)
ia_archiver (+http://www.alexa.com/site/help/webmasters; crawler@alexa.com),gzip(gfe),gzip(gfe),gzip(gfe)
Join Project Honey Pot, lots and lots of learning there.

ForceHSS 11-01-2011 12:55 AM
Quote:
Originally Posted by Max Taxable (Post 2263310)
That's not associated with a "hacker."

http://www.projecthoneypot.org/ip_204.236.226.210

Code:
204.236.226.210's User Agent Strings
ia_archiver (+http://www.alexa.com/site/help/webmasters; crawler@alexa.com)
ia_archiver (+http://www.alexa.com/site/help/webmasters; crawler@alexa.com),gzip(gfe),gzip(gfe)
ia_archiver (+http://www.alexa.com/site/help/webmasters; crawler@alexa.com),gzip(gfe),gzip(gfe),gzip(gfe)
Join Project Honey Pot, lots and lots of learning there.
http://www.stopforumspam.com/ipcheck/204.236.232.2
just a spam bot

--------------- Added [DATE]1320108944[/DATE] at [TIME]1320108944[/TIME] ---------------

Quote:
Originally Posted by Breakthecycle2 (Post 2262726)
I have Glow Host, bad behavior and honeypot installed. Is there something else?
https://vborg.vbsupport.ru/showthread.php?t=268208

Max Taxable 11-01-2011 01:04 AM
Quote:
Originally Posted by ForceHSS (Post 2263317)
http://www.stopforumspam.com/ipcheck/204.236.232.2

--------------- Added [DATE]1320108944[/DATE] at [TIME]1320108944[/TIME] ---------------



https://vborg.vbsupport.ru/showthread.php?t=268208
If he is in Project Honey Pot he should know the IP he posted is clean, NOT associated with any hackers, or even any spam.

You do understand of course the IP you referenced isn't the same one he posted about.

ForceHSS 11-01-2011 01:16 AM
Quote:
Originally Posted by Max Taxable (Post 2263319)
If he is in Project Honey Pot he should know the IP he posted is clean, NOT associated with any hackers, or even any spam.

You do understand of course the IP you referenced isn't the same one he posted about.
it is check the nearby ips
http://www.stopforumspam.com/ipcheck/204.236.226.210

Max Taxable 11-01-2011 02:08 AM
Quote:
Originally Posted by ForceHSS (Post 2263324)
Nearby isn't the same, but clearly a spammer has been reported on this one as well.

User agent when it's spamming is likely IE6 or earlier, or Opera.

For the OP: The "IsBot" mod stops all spammers which are automated, botnet zombie computers, regardless of user agent. It emails you with the details such as username used, IP and email address used.

ForceHSS 11-01-2011 02:23 AM
avatarachrfid@gmail.com then search by his email you will see remember ips can be changed


All times are GMT. The time now is 10:29 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01212 seconds
  • Memory Usage 1,757KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (2)bbcode_code_printable
  • (9)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (17)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 
Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 
Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete