vb.org Archive - Are these hackers?

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vB4 General Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=251)

- - Are these hackers? (https://vborg.vbsupport.ru/showthread.php?t=294759)

obglobal.net

02-04-2013 04:40 PM

Are these hackers?

I've recently had 4 members sign up under weird names, and now as I've just checked to see who's online, I see this:

AreraPinnyfef 05:27 PM Unknown Location
/index.php

What's happening here? Should I ban all the similar, odd names?

Thanks.

ForceHSS

02-04-2013 04:44 PM

Check there ip and email on this site

Digital Jedi

02-04-2013 05:22 PM

It's showing up as Unknown Location because index.php isn't a known location in vBulletin. This happens sometimes when modifications to your board add custom pages or you've made a separate vB page your main domain; your landing page.

But even so, sometimes funny names (beyond the usual weird names people sometimes pick) are automated registrations. Either a spam bot looking to post, or looking to put links in its signature to help boost a particular sites search engine's rankings. Check the user's email. If it's also some kind of gibberish, a bizarre or foreign domain name (particularly .ru, if you're not expecting a lot of registrations from Russia) and/or if his signature has some weird links to it (like links to cheap plastic surgery, affordable real estate cheap brand name products, etc), then it's probably a spam bot.

Trust me, hackers won't show up in Who's Online. ;)

gajinoz

02-04-2013 07:43 PM

A while ago I had a rash of spambots attacking my site. They all registered with weird names, probably just random character selections. I installed the mod "spammers suck" and that stopped them dead. Have a look for it.

As somebody said, check their IP and email address in stopforumspam site and if their IP is from Russia or China especially there is a good chance it's a spammer or bot.

Amaury

02-04-2013 09:52 PM

If you want to fix the unknown location, you can create a plugin.

Title: Index.php - Unknown Location
Content:

Code:

if (strpos($userinfo['location'], 'index.php') !== false) 

{

  $userinfo['action'] = 'Viewing Index';

$userinfo['where'] = '<a href="index.php'.$vbulletin->session->vars[sessionurl].'">[Forum Name] Forum</a>';

  $handled = true;

}

The title can be whatever, of course.

All times are GMT. The time now is 11:33 PM.

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01115 seconds Memory Usage 1,719KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)bbcode_code_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)post_thanks_navbar_search (1)printthread (5)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: