Register Members List Search Today's Posts Mark Forums Read

Reply
 
Thread Tools
  #16  
Old 26 Oct 2012, 20:18
Max Taxable's Avatar
Max Taxable Max Taxable is offline
 
Join Date: Feb 2011
Originally Posted by Midohash View Post
Thanks a lot Max Taxable ... I got your point ... I hope I'll find something unique for him ... May I ask please, if I find something unique for him e.g. BOIE9 or ENXA, should I put the word as it is in Ban Spiders By User Agent or there is a special format?
Yes, put just the unique part of the string in as a separate line in BSBUA.
Reply With Quote
  #17  
Old 26 Oct 2012, 22:11
Midohash's Avatar
Midohash Midohash is offline
 
Join Date: Aug 2010
Originally Posted by Max Taxable View Post
Yes, put just the unique part of the string in as a separate line in BSBUA.
Many thanks, I hope it will work with that evil guy!
__________________
منتديات المطاريد
https://www.almatareed.org
Reply With Quote
  #18  
Old 26 Oct 2012, 22:14
Max Taxable's Avatar
Max Taxable Max Taxable is offline
 
Join Date: Feb 2011
Originally Posted by Midohash View Post
Many thanks, I hope it will work with that evil guy!
He's lucky it's not my board he keeps coming back to.
Reply With Quote
  #19  
Old 27 Oct 2012, 15:40
Midohash's Avatar
Midohash Midohash is offline
 
Join Date: Aug 2010
Originally Posted by Max Taxable View Post
He's lucky it's not my board he keeps coming back to.
I am pretty sure you will change your mind ... Is it possible to use the following in Ban Spiders By User Agent:

(Windows NT 6.0; rv:16.0)

I mean to paste it exactly like that or I have to do some modification? ... Also can it blocks other innocent users?

Many thanks
__________________
منتديات المطاريد
https://www.almatareed.org
Reply With Quote
  #20  
Old 27 Oct 2012, 15:43
Max Taxable's Avatar
Max Taxable Max Taxable is offline
 
Join Date: Feb 2011
Originally Posted by Midohash View Post
Is it possible to use the following in Ban Spiders By User Agent:

(Windows NT 6.0; rv:16.0)

I mean to paste it exactly like that or I have to do some modification? ... Also can it blocks other innocent users?

Many thanks
That would block hundreds of millions of innocent people. Don't do it.

If you have his user agent string, paste it here for me to look at if you don't mind?

And no, I would not change my mind. HE would be getting a new computer after he put the fire out.
Reply With Quote
  #21  
Old 27 Oct 2012, 16:06
Midohash's Avatar
Midohash Midohash is offline
 
Join Date: Aug 2010
Originally Posted by Max Taxable View Post
That would block hundreds of millions of innocent people. Don't do it.

If you have his user agent string, paste it here for me to look at if you don't mind?

And no, I would not change my mind. HE would be getting a new computer after he put the fire out.
I will definitely do, I am keep watching now. Thanks a lot for your continuous advise and support ... Is there any way to redirect him once he registers again to a malicious site to infect his PC? ... The idea jumped to my mind when you wrote this phrase:

HE would be getting a new computer after he put the fire out.
__________________
منتديات المطاريد
https://www.almatareed.org
Reply With Quote
  #22  
Old 27 Oct 2012, 16:27
vijayninel's Avatar
vijayninel vijayninel is offline
 
Join Date: Mar 2009
Real name: Vijay
Originally Posted by Midohash View Post
I have never heard about it and don't know what is it for? ... would appreciate some more information please

I use a hack which informs me by a pm if 2 accounts are logging on through the same computer. I don't know if AE detector is an alternative name to this product or a different one?
That might be it. this is the one actually http://www.vbulletin.org/forum/showthread.php?t=183268

Use it to detect multiple accounts and then put them on global ignore using the "tachy goes coventry" from user banning options. Dont ban them - always put on ignore. If you ban them then they will just keep coming back.
Reply With Quote
  #23  
Old 27 Oct 2012, 16:28
Max Taxable's Avatar
Max Taxable Max Taxable is offline
 
Join Date: Feb 2011
Originally Posted by Midohash View Post
I will definitely do, I am keep watching now. Thanks a lot for your continuous advise and support ... Is there any way to redirect him once he registers again to a malicious site to infect his PC? ... The idea jumped to my mind when you wrote this phrase:

HE would be getting a new computer after he put the fire out.
I wouldn't recommend any of that. However, back in my botnet fighting days I wasn't above going into the zombie computers through their modem and frying their processor by grossly overclocking it. That's what I was referencing. Those computers were wet paper sacks for security, that's why they were botnet zombies to start with.

--------------- Added 27 Oct 2012 at 16:29 ---------------

Originally Posted by vijayninel View Post
That might be it. this is the one actually http://www.vbulletin.org/forum/showthread.php?t=183268

Use it to detect multiple accounts and then put them on global ignore using the "tachy goes coventry" from user banning options. Dont ban them - always put on ignore. If you ban them then they will just keep coming back.
The only problem with Tachy is, if they log out they can see their posts aren't posting.
Reply With Quote
  #24  
Old 27 Oct 2012, 16:35
vijayninel's Avatar
vijayninel vijayninel is offline
 
Join Date: Mar 2009
Real name: Vijay
Originally Posted by Max Taxable View Post
The only problem with Tachy is, if they log out they can see their posts aren't posting.
Yes. If they realise that then they will create another account. So you have to repeat the process again. The thing is that if they have to keep checking it takes the fun out of trolling and ultimately they give up.

I have worn out several determined trolls this way. Trust me - banning doesnt work. Put them on global ignore and wear them out.
Reply With Quote
  #25  
Old 27 Oct 2012, 16:45
Max Taxable's Avatar
Max Taxable Max Taxable is offline
 
Join Date: Feb 2011
Originally Posted by vijayninel View Post
Yes. If they realise that then they will create another account. So you have to repeat the process again. The thing is that if they have to keep checking it takes the fun out of trolling and ultimately they give up.

I have worn out several determined trolls this way. Trust me - banning doesnt work. Put them on global ignore and wear them out.
That is one of my techniques. I've never banned any account, letting them know they are banned only encourages more of the same, I agree.



To the OP: To REALLY freak your guy out, unban his account, assign it a password only you know, and start posting with it. Have him looking for homosexual hookups, etc.
Reply With Quote
  #26  
Old 27 Oct 2012, 17:41
Midohash's Avatar
Midohash Midohash is offline
 
Join Date: Aug 2010
Originally Posted by vijayninel View Post
That might be it. this is the one actually http://www.vbulletin.org/forum/showthread.php?t=183268

Use it to detect multiple accounts and then put them on global ignore using the "tachy goes coventry" from user banning options. Dont ban them - always put on ignore. If you ban them then they will just keep coming back.
Originally Posted by Max Taxable View Post
I wouldn't recommend any of that. However, back in my botnet fighting days I wasn't above going into the zombie computers through their modem and frying their processor by grossly overclocking it. That's what I was referencing. Those computers were wet paper sacks for security, that's why they were botnet zombies to start with.

--------------- Added 27 Oct 2012 at 16:29 ---------------

The only problem with Tachy is, if they log out they can see their posts aren't posting.
Thanks a lot vijayninel and Max Taxable. I found that I have the same hack recognizing multiple accounts but was installed in a different name in Arabic translation version. However the hack was not effective with that evil guy at all! He registers many times a day and the hack has never caught him even once! ... As mentioned before he has a sound background in IT technology and software for my hard luck ... Most of his registrations are with fake emails which he is unable to verify of course! ... His main aim is to display dozens of obscene and evil usernames on (who is on line) and other forum statistics! ... I have tried several options including:

* Helding registration to new members, however re-enabled it after a couple of days!
* Made forum statistics invisible to all groups expect group 6 (Admins) which is me , However forum members requested re-enabling them again after several days in spite of explaining to them my reasons!

Is there anyway to allow forum statistics and at the same time to Prevent Users awaiting Email confirmation and awaiting Moderation from getting displayed on them!
__________________
منتديات المطاريد
https://www.almatareed.org
Reply With Quote
  #27  
Old 27 Oct 2012, 18:42
vijayninel's Avatar
vijayninel vijayninel is offline
 
Join Date: Mar 2009
Real name: Vijay
Originally Posted by Midohash View Post
Most of his registrations are with fake emails which he is unable to verify of course! ... His main aim is to display dozens of obscene and evil usernames on (who is on line) and other forum statistics! ... I have tried several options including:

* Helding registration to new members, however re-enabled it after a couple of days!
* Made forum statistics invisible to all groups expect group 6 (Admins) which is me , However forum members requested re-enabling them again after several days in spite of explaining to them my reasons!

Is there anyway to allow forum statistics and at the same time to Prevent Users awaiting Email confirmation and awaiting Moderation from getting displayed on them!
I think users awaiting confirmation arent shown on Who's online. Check if the usergroup id is listed in forum.php. Usually the usergroup id of Users Awaiting Email Confirmation is 3 it may be different on your forum. If it is then add that number to the skipgroups array in forum.php like 3,4,5 etc.


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.


Also set your usergroup permissions so that Users Awaiting Email Confirmation cant post on the forums.
Reply With Quote
  #28  
Old 27 Oct 2012, 19:56
Midohash's Avatar
Midohash Midohash is offline
 
Join Date: Aug 2010
Originally Posted by vijayninel View Post
I think users awaiting confirmation arent shown on Who's online. Check if the usergroup id is listed in forum.php. Usually the usergroup id of Users Awaiting Email Confirmation is 3 it may be different on your forum. If it is then add that number to the skipgroups array in forum.php like 3,4,5 etc.


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.


Also set your usergroup permissions so that Users Awaiting Email Confirmation cant post on the forums.
I have tried all those precautions but still users awaiting email confirmation (group ID =3) appear on forum statistics including those on line. However they couldn't post

--------------- Added 28 Oct 2012 at 12:20 ---------------

The evil guy user agent looks like that:

Mozilla/5.0 (Windows NT 6.0; rv:16.0) Gecko/20100101 Firefox/16.0

Any suggestions?

--------------- Added 28 Oct 2012 at 12:47 ---------------

This is the full user agent of the evil guy:

"
host-41.235.34.232.tedata.net - - [27/Oct/2012:19:38:43 -0500] "GET /favicon.ico HTTP/1.1" 200 491 "-" "Mozilla/5.0 (Windows NT 6.0; rv:16.0) Gecko/20100101 Firefox/16.0"
host-41.235.34.232.tedata.net - - [27/Oct/2012:19:38:44 -0500] "GET /vb/ HTTP/1.1" 200 25587 "-" "Mozilla/5.0 (Windows NT 6.0; rv:16.0) Gecko/20100101 Firefox/16.0"
Can I use something like that: HTTP/1.1 in ban spiders by user agent?
__________________
منتديات المطاريد
https://www.almatareed.org
Reply With Quote
  #29  
Old 29 Oct 2012, 00:35
Midohash's Avatar
Midohash Midohash is offline
 
Join Date: Aug 2010
Just to let you know that the evil obscene guy I am talking about him has registered here today with my real name (mohamed hashesh) to continue his disgraceful and obscene behaviour!
__________________
منتديات المطاريد
https://www.almatareed.org
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 16:42.

Layout Options | Width: Wide Color: