vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vB4 General Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=251)
-   -   Pest members (https://vborg.vbsupport.ru/showthread.php?t=321798)

jagtpf 02-13-2016 01:05 PM

Pest members
 
What do you all do with members who refuse to remain banned. They're savvy enough to know how to obtain cloned IP addresses and emails are largely free.

We have "miserable users" mod on board, but one gentleman stays below the parapet for weeks as a seemingly attentive member doing all the 'right' things and then suddenly begins causing havoc....

In one of his guises he used at least 30+ IP addresses - no doubt some could be legit - especially if he likes coffee with his wi-fi :D

final kaoss 02-13-2016 01:23 PM

Are you using a proxy killer? Might help in this case.

jagtpf 02-13-2016 01:31 PM

Quote:

Originally Posted by final kaoss (Post 2564798)
Are you using a proxy killer? Might help in this case.

No we're not - I'll look into that.

Thank you.

Dave 02-13-2016 02:21 PM

Every time I see a new proxy registration, I always block the whole host (all IP ranges that belong to that host) and block the email domain in case it's a spam/temporary domain. Currently have a nice list of nearly 80 million blocked IP addresses from hosts which provide hosting/VPN services and such.
I don't care about traffic from such hosts, I only need legitimate traffic from users with home connection ISP's and the search engine bots.

jagtpf 02-13-2016 02:34 PM

Quote:

Originally Posted by Dave (Post 2564806)
Every time I see a new proxy registration, I always block the whole host (all IP ranges that belong to that host) and block the email domain in case it's a spam/temporary domain. Currently have a nice list of nearly 80 million blocked IP addresses from hosts which provide hosting/VPN services and such.
I don't care about traffic from such hosts, I only need legitimate traffic from users with home connection ISP's and the search engine bots.

Thanks Dave, but how do you identify the proxy registration in the first instance without affecting otherwise legitimate members, say those at work where their company uses proxies. What proxy trapper would you recommend.

Geoff

Dave 02-13-2016 05:18 PM

I don't really make use of a proxy trapper, I do it all manually.

I do it like this:
1. Whenver I see a suspicious registration, I enter the IP here: https://ipinfo.io/ and check to which ISP it belongs.
2. I Google the ISP and lookup the main site and see what kind of services they provide.
3. If they provide hosting services, not for home connections, I usually block the whole thing using a custom script I wrote to generate all IP ranges that have to be blocked.
4. After I generated all the IP ranges that have to be blocked, I apply it to a tool called Peerblock (for Windows). Of course it can be applied to iptables on Linux as well.

This will not work if you use something such as Cloudflare though.

Paul M 02-13-2016 07:41 PM

I just ban them again when we come across them, no message, no fuss.

They eventually get bored of constant re-regeristing, its a lot of work for them, a single click for me.

jagtpf 02-14-2016 07:22 AM

Quote:

Originally Posted by Dave (Post 2564818)
I don't really make use of a proxy trapper, I do it all manually.

I do it like this:
1. Whenver I see a suspicious registration, I enter the IP here: https://ipinfo.io/ and check to which ISP it belongs.
2. I Google the ISP and lookup the main site and see what kind of services they provide.
3. If they provide hosting services, not for home connections, I usually block the whole thing using a custom script I wrote to generate all IP ranges that have to be blocked.
4. After I generated all the IP ranges that have to be blocked, I apply it to a tool called Peerblock (for Windows). Of course it can be applied to iptables on Linux as well.

This will not work if you use something such as Cloudflare though.

Aye - we check the IP addresses and every time they come up legit - why I commented about the guy liking his coffee! Some email addresses seem odd and yet he obviously is able to route PMs etc through to his 'correct' address.

Quote:

Originally Posted by Paul M (Post 2564824)
I just ban them again when we come across them, no message, no fuss.

They eventually get bored of constant re-regeristing, its a lot of work for them, a single click for me.

We keep doing that - no sign of boredom yet. We even shut the Forum down for a month around Christmas after banning his latest account, and yet he already had another one which he'd been using 'normally' for about 150 posts before he reverted to trouble ....

Skyrider 02-14-2016 11:33 AM

Why not use something like this?

https://vborg.vbsupport.ru/showthread.php?t=125871
https://vborg.vbsupport.ru/showthread.php?t=183268

Be sure to read the latest posts for vB4 compatibility.

jagtpf 02-14-2016 12:12 PM

Quote:

Originally Posted by Skyrider (Post 2564845)
Why not use something like this?

https://vborg.vbsupport.ru/showthread.php?t=125871
https://vborg.vbsupport.ru/showthread.php?t=183268

Be sure to read the latest posts for vB4 compatibility.

Because they are both flagged as vB3 versions - nothing to say they were available for vB4. However can they cope with multi-accounts that don't use the same IP or email addresses?


All times are GMT. The time now is 10:42 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01061 seconds
  • Memory Usage 1,739KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (5)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (1)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete