There's no such thing as a stupid question, but they're the easiest to answer.
JoinTour
Login
 
Tag Cloud
acer bios black screen blue screen of death boot computer connection crash css dell display driver drivers email error excel explorer firefox firefox 3 freeze game hard drive internet internet explorer itunes laptop linux malware monitor network networking outlook outlook 2003 outlook express partition printer problem ram router slow sound sprtcmd.exe startup trojan usb virus vista windows windows xp wireless
Web Design & Development
Search
Search in:
 
Advanced Search
Tech Support Guy Forums > Internet & Networking > Web Design & Development >
need some ip banning help


HELLO AND WELCOME! Before you can post your question, you'll have to register -- it's completely free! Click here to join today! We highly recommend that you print a copy of our Guide for New Members. Enjoy!

Closed Thread
 
Thread Tools
siko's Avatar
Computer Specs
Junior Member with 2 posts.
 
Join Date: Jul 2006
Location: Missouri
Experience: Advanced
21-Jul-2006, 12:01 AM #1
need some ip banning help
hello there,

I currently run a forum much like your own here. I have had a member which i banned ages ago who will not go away and has made "puppet" accounts. He claims to work for a company where he has access to several hundred ips. I have banned at least 13 ips, however he has claimed that he has at least 399 ip addresses to use. Frankly im sick of this guy and would like to ban him forever. Any suggestions?...if it helps i run an invision free forum.

thx
siko
jbcalg's Avatar
Distinguished Member with 2,059 posts.
 
Join Date: Oct 2001
Location: W. Canada
21-Jul-2006, 01:59 AM #2
tough one
- can you ban all or part of a range based on the IPs you've already seen?
- does he use the same email addy (ban that)
- do you require validation for new accounts, slow that down to admin approval (a large pain depending on new registrations daily)

- really fed up? email abuse or legal at the IP owner's site or address, provide details of what this person is doing on company time/resources
__________________
jb
* * * * * * * * * * *
thecoalman's Avatar
Computer Specs
Distinguished Member with 2,503 posts.
 
Join Date: Mar 2006
Location: Pennsylvania
Experience: What's the shiny red button for? <click>
21-Jul-2006, 09:08 AM #3
Are they all coming from the same range? Such as xxx.xxx.xxx.123 and xxx.xxx.xxx.321?

If so and ban the range, I'm not familiar with invision but banning xxx.xxx.xxx.* would ban all ip's that start with xxx.xxx.xxx in phpbb. You can also ban it with htaccess. open up notepad and add the following:

Code:
order allow,deny 
deny from xxx.xxx.xxx
allow from all
Save and upload to your site and make sure it's named .htaccess It has to be somewhere in the path to you forum folder. You can save it dirtectly to the forum folder. That will ban any ip that starts with xxx.xxx.xxx

The last suggestion above is far better, companies usually are not to happy to find out their employees are abusing their system especially if they are using it to harass someone. If it was my employee his *** would be fired on the spot.

In the end though if the person is persistent there is many ways to get around most ifnot all of the things you can do such as using a open proxy server, in that case you'd just have to ignore them and hope they go away.
siko's Avatar
Computer Specs
Junior Member with 2 posts.
 
Join Date: Jul 2006
Location: Missouri
Experience: Advanced
21-Jul-2006, 12:37 PM #4
Quote:
does he use the same email addy (ban that)
nope he changes it every time.

Quote:
do you require validation for new accounts, slow that down to admin approval (a large pain depending on new registrations daily)
tried that. it doesnt do any good, it delays progress of the forum member wise, plus he isnt obvious, so he can make a 'puppet' that seems legit.

Quote:
really fed up? email abuse or legal at the IP owner's site or address, provide details of what this person is doing on company time/resources
dont know what company he works for.

Quote:
Are they all coming from the same range? Such as xxx.xxx.xxx.123 and xxx.xxx.xxx.321?
nope, if it was that easy i wouldnt be here.

they are completely random such has with ips such as 69.xxx.xxx.xxx, 66.xxx.xxx.xxx, 12.xxx.xxx.xxx, 150.xxx.xxx.xxx. He uses 69, 66, 12, and 150 most of the time(that i know of) with all of the other 9 Xs having completely random numbers.

siko
thecoalman's Avatar
Computer Specs
Distinguished Member with 2,503 posts.
 
Join Date: Mar 2006
Location: Pennsylvania
Experience: What's the shiny red button for? <click>
21-Jul-2006, 02:22 PM #5
What about banning free email accounts like those from yahoo, gmail? In phpbb you can just use a wildcard and ban all registrations from a domain such as yahoo. Pain in the butt for legitimate users that want to register but you can't hide if it's a isp mail account. You could just do it temporarily then lift after a few weeks, by that time he'll have given up.


Quote:
Originally Posted by siko


they are completely random such has with ips such as 69.xxx.xxx.xxx, 66.xxx.xxx.xxx, 12.xxx.xxx.xxx, 150.xxx.xxx.xxx. He uses 69, 66, 12, and 150 most of the time(that i know of) with all of the other 9 Xs having completely random numbers.
if they are all random like that I think you're out of luck because he's probably using a proxy server. You can look up who the ip is assigned too here: http://www.arin.net/ Or just google the IP in quotes. If it's a open proxy server you'll quickly find out using google.

I know there is a mod for phpbb for blocking registrations coming from open proxies but I can't help you with invision. You can do it through htaccess but you would need a list of known ip's.
tramaco's Avatar
Junior Member with 14 posts.
 
Join Date: Jun 2006
Experience: Advanced
21-Jul-2006, 07:07 PM #6
IP's changed periodically??
I spoke with a (not too knowledgeable tech support person) in an ISP, and she told me that the IP changes periodically for everybody, that there is a dynamic IP and a static IP, for particular types of customers. I can't believe that, but that is what she said. I have been tracking my own IP and it hasn't changed in 6 weeks. So there it is.

I check it with cmd (ip)
ipconfig
Squashman's Avatar
Distinguished Member with 12,699 posts.
 
Join Date: Apr 2003
Location: 1265 Lombardi Ave
21-Jul-2006, 07:23 PM #7
If his IP is changing that drastically then he is using a Proxy to come into your site. I would say he is using something like Tor.
thecoalman's Avatar
Computer Specs
Distinguished Member with 2,503 posts.
 
Join Date: Mar 2006
Location: Pennsylvania
Experience: What's the shiny red button for? <click>
21-Jul-2006, 09:19 PM #8
Quote:
Originally Posted by tramaco
that there is a dynamic IP and a static IP, for particular types of customers. I can't believe that, but that is what she said.
That depends on your type of connection and your ISP. For dial-up evertime you reconnect it's going to be a different IP but they aren't going to change much. Mostly the last three numbers. If you're on cable/dsl it won't change unless you get disconnected and even then some cable ISP's assign an IP to a customer so even when they reconnect it's still the same. In my case it changes...
Eriksrocks's Avatar
Computer Specs
Senior Member with 1,859 posts.
 
Join Date: Aug 2005
Location: Minnesota
Experience: Advanced
21-Jul-2006, 09:32 PM #9
How many members do you have? You might have to just get creative, like sending out a PM to all your members and then moving the forum to a different directory so he can't find it.

Otherwise confront him and maybe try to squeeze some information out of him, see what you can do with it.

You could just disable registrations until he gives up.
john1's Avatar
Distinguished Member with 8,681 posts.
 
Join Date: Nov 2000
Location: England
21-Jul-2006, 09:55 PM #10
You could try resolving your beef with this person.
His actions clearly require some effort on his behalf.
He is not acting like this for nothing.

Settle. Come to terms. The eventually the troubles
start to matter more than the rights and wrongs of
the situation.

John
brendandonhu's Avatar
Distinguished Member with 15,988 posts.
 
Join Date: Jul 2002
Location: Ann Arbor, MI
Experience: Advanced
21-Jul-2006, 10:23 PM #11
Can you post one of the IPs he uses? If you can find out what proxy list he's using you might be able to ban more of them.
Eriksrocks's Avatar
Computer Specs
Senior Member with 1,859 posts.
 
Join Date: Aug 2005
Location: Minnesota
Experience: Advanced
21-Jul-2006, 10:28 PM #12
Quote:
Originally Posted by john1
You could try resolving your beef with this person.
His actions clearly require some effort on his behalf.
He is not acting like this for nothing.

Settle. Come to terms. The eventually the troubles
start to matter more than the rights and wrongs of
the situation.

John
I don't think that would work. He's probably just some jerk that wants to create trouble, has no reason, has no life, just has some problems.
dvk01's Avatar
Moderator with 24,766 posts.
 
Join Date: Dec 2002
Location: Loughton, Essex, UK
22-Jul-2006, 03:06 AM #13
tramaco

I've removed your off topic political rant

if you want to discuss politics then Civ debate is the place NOT any PC help forum
sn1p34's Avatar
Senior Member with 135 posts.
 
Join Date: Feb 2005
Location: Canada
Experience: Average
23-Jul-2006, 01:01 AM #14
With PHP you can get the ip hidden behind the proxy, then you can ban that ip.
brendandonhu's Avatar
Distinguished Member with 15,988 posts.
 
Join Date: Jul 2002
Location: Ann Arbor, MI
Experience: Advanced
23-Jul-2006, 01:29 AM #15
That will only work if the proxy sends HTTP_FORWARDED_FOR, which most don't.
Closed Thread

THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
WELCOME TO TECH SUPPORT GUY! Are you looking for the solution to your computer problem? Join our site today to ask your question -- for free! Our site is run completely by volunteers who help people like you solve computer problems. See our Welcome Guide to get started.



Thread Tools


You Are Using:
Server ID
Advertisements do not imply our endorsement of that product or service.
All times are GMT -4. The time now is 11:13 AM.
Copyright © 1996 - 2008 TechGuy, Inc. All rights reserved.
Powered by vBulletin, Copyright © 2000 - 2008, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.1.0
Powered by Cermak Technologies, Inc.