Banned IP address

Get help with installation and running phpBB 3.1.x here. Please do not post bug reports, feature requests, or extension related questions here.
Anti-Spam Guide
Forum rules
READ: phpBB.com Board-Wide Rules and Regulations

NOTE: phpBB 3.1.x is at its End of Life stage and support will NOT be provided after July 1st, 2018.
BB1955
Registered User
Posts: 293
Joined: Fri Nov 17, 2006 8:27 pm

Banned IP address

Post by BB1955 » Wed Mar 02, 2016 3:56 pm

Anyone know where the "banned IP Address'" are stored?

I'd like to be able to edit that list directly if possible??

BB

User avatar
david63
Jr. Extension Validator
Posts: 15607
Joined: Thu Dec 19, 2002 8:08 am
Location: Lancashire, UK
Name: David Wood
Contact:

Re: Banned IP address

Post by david63 » Wed Mar 02, 2016 4:03 pm

Try the banlist table of the database

I would add that it is pointless trying to ban IP addresses in the first place.
David
Remember: You only know what you know and - you don't know what you don't know!
My CDB Contributions | How to install an extension
I will not be accepting translations for any of my extensions in Github - please post any translations in the appropriate topic.
No support requests via PM or email as they will be ignored

BB1955
Registered User
Posts: 293
Joined: Fri Nov 17, 2006 8:27 pm

Re: Banned IP address

Post by BB1955 » Wed Mar 02, 2016 4:07 pm

david63 wrote:Try the banlist table of the database

I would add that it is pointless trying to ban IP addresses in the first place.
why is that. I've had 4 attacks (mostly out of China) on the forums over the years. I banned the IP ranges and it stopped immediately.


They were always in a "range" of IP address'. Sometimes several ranges. I may be loosing some members in China, but my forums don't appeal to China much anyway.
Last edited by BB1955 on Wed Mar 02, 2016 4:09 pm, edited 1 time in total.

User avatar
Lumpy Burgertushie
Registered User
Posts: 65901
Joined: Mon May 02, 2005 3:11 am
Contact:

Re: Banned IP address

Post by Lumpy Burgertushie » Wed Mar 02, 2016 4:09 pm

and tomorrow, those same spammers will change the IP address and be right back at it.

stop them from registering in the first place and then you will never know they even attempted to do so.


robert
I am available for custom work on a donation basis. Please send me a PM with your needs.

Premium phpBB 3.2 Styles by PlanetStyles.net

OK, so what's the speed of dark?

User avatar
5hocK
Registered User
Posts: 3011
Joined: Wed Nov 23, 2011 7:00 pm
Location: England

Re: Banned IP address

Post by 5hocK » Wed Mar 02, 2016 4:20 pm

It begs the question - Why is there an option to ban IP's when it's pretty much pointless?
A thread is pretty much a topic. Stop with the pedantics will ya.

User avatar
david63
Jr. Extension Validator
Posts: 15607
Joined: Thu Dec 19, 2002 8:08 am
Location: Lancashire, UK
Name: David Wood
Contact:

Re: Banned IP address

Post by david63 » Wed Mar 02, 2016 4:29 pm

5hocK wrote:It begs the question - Why is there an option to ban IP's when it's pretty much pointless?
It is probably legacy - when it was first introduced banning IP address did have some effect, but over the years banning them has become more or less useless. I guess that the devs have never got round to taking it out.
David
Remember: You only know what you know and - you don't know what you don't know!
My CDB Contributions | How to install an extension
I will not be accepting translations for any of my extensions in Github - please post any translations in the appropriate topic.
No support requests via PM or email as they will be ignored

BB1955
Registered User
Posts: 293
Joined: Fri Nov 17, 2006 8:27 pm

Re: Banned IP address

Post by BB1955 » Wed Mar 02, 2016 4:46 pm

Lumpy Burgertushie wrote:and tomorrow, those same spammers will change the IP address and be right back at it.

stop them from registering in the first place and then you will never know they even attempted to do so.


robert
What is the best way?

I am using the "question" method now and that usually works until the bots figure out the answer (probably a person setting it up for them). Then the "attack" is on. dozens of registrations at a time.

They even respond to the email sent to them to "activate" their accounts. Not sure how they did that, but they did. Most of the email address' are on gmail, outlook, or Yahoo, but a few on .ru email accounts.

User avatar
Kigen
Registered User
Posts: 26
Joined: Wed Jun 15, 2005 7:17 am
Location: Behind you....
Contact:

Re: Banned IP address

Post by Kigen » Wed Mar 02, 2016 5:47 pm

Banning IPs can work for a set amount of time. Eventually spammers and such cycle their IPs. So permanently banning IPs isn't wise. A good chunk of spamming comes from dedicated servers. And they don't cycle their IPs as often as say a spammer using their residential connection. This is due to static vs dynamic IPs. Dedicated servers use static IPs. Its possible to have the IP changed, but it requires action on the part of a human generally. Also, banning entire dedicated server providers can work against spammers. The only legitimate traffic that would come out of a dedicated server provider is VPN-type traffic or search engine traffic, but the major search engines have their own IP blocks. Going after residential spammers is much harder due to dynamic IPs. But the spammer generally has a much more limited bandwidth than if they used a dedicated server provider.
- Kigen, the Legendary Lone Marine.
Steamcast Music Directory - Radio Toolbox
Don't go here.

User avatar
Lumpy Burgertushie
Registered User
Posts: 65901
Joined: Mon May 02, 2005 3:11 am
Contact:

Re: Banned IP address

Post by Lumpy Burgertushie » Wed Mar 02, 2016 6:08 pm

then of course, there are proxies.


robert
I am available for custom work on a donation basis. Please send me a PM with your needs.

Premium phpBB 3.2 Styles by PlanetStyles.net

OK, so what's the speed of dark?

BB1955
Registered User
Posts: 293
Joined: Fri Nov 17, 2006 8:27 pm

Re: Banned IP address

Post by BB1955 » Wed Mar 02, 2016 6:37 pm

OK, I get banning IP's. I do a range if it is a bunch using the same IP in a range like 192.168.*.*

But back to my question, what is the best practice for stopping them at registration? As I said, I use the question built into the program, but I still will get an attack (like yesterday) of over 130 registrations that got by that. 1/2 of them responded to the "activate account" email, so it is some where in between a bot and a person doing this. Perhaps a combo of both.

What is the answer to that stopping that other then figuring out the IP address range that they have in common and ban that range?


BB

User avatar
Kigen
Registered User
Posts: 26
Joined: Wed Jun 15, 2005 7:17 am
Location: Behind you....
Contact:

Re: Banned IP address

Post by Kigen » Wed Mar 02, 2016 6:58 pm

To stop spam its best to use reCAPTCHA 2.0 and/or Stop Forum Spam.
- Kigen, the Legendary Lone Marine.
Steamcast Music Directory - Radio Toolbox
Don't go here.

BB1955
Registered User
Posts: 293
Joined: Fri Nov 17, 2006 8:27 pm

Re: Banned IP address

Post by BB1955 » Wed Mar 02, 2016 7:27 pm

Kigen wrote:To stop spam its best to use reCAPTCHA 2.0 and/or Stop Forum Spam.
reCAPTCHA is "abandoned" and I don't use abandoned extensions. I learned that the hard way.

Stop Forum SPAM I don't quite get where it gets its info to block a registration from.

BB

User avatar
Kigen
Registered User
Posts: 26
Joined: Wed Jun 15, 2005 7:17 am
Location: Behind you....
Contact:

Re: Banned IP address

Post by Kigen » Wed Mar 02, 2016 8:32 pm

The reCAPTCHA 2.0 works fine. It will be an official part of phpBB 3.2 whenever that releases. The Stop Forum Spam gets its data from people who get API keys to submit entries. Most of the entries are from honeypots. The rest is from manual entries by whatever gets by.

https://www.stopforumspam.com/faq
- Kigen, the Legendary Lone Marine.
Steamcast Music Directory - Radio Toolbox
Don't go here.

BB1955
Registered User
Posts: 293
Joined: Fri Nov 17, 2006 8:27 pm

Re: Banned IP address

Post by BB1955 » Wed Mar 02, 2016 9:55 pm

OK, after reading their website, I think I might try "Stop Forum Spam".

Does anyone have any experience with it? does it work well?

BB

User avatar
Lumpy Burgertushie
Registered User
Posts: 65901
Joined: Mon May 02, 2005 3:11 am
Contact:

Re: Banned IP address

Post by Lumpy Burgertushie » Wed Mar 02, 2016 10:35 pm

if you use a good question that the answer can not be found in google and is not a multiple choice or what color type question, then the built in Q&A works almost 100% of the time for most people.

yes, if a human comes along and takes your question/answer and adds it to a spammer list, it will get spread around and be no good. I don't think that happens very often.


the best type of question is something specific to your site.

what is the object in our logo,
or things like that.

I have heard of many cases of false positives with stop forum spam type systems.

robert
I am available for custom work on a donation basis. Please send me a PM with your needs.

Premium phpBB 3.2 Styles by PlanetStyles.net

OK, so what's the speed of dark?

Locked

Return to “[3.1.x] Support Forum”

Who is online

Users browsing this forum: No registered users and 8 guests