ip banning issues

There was an unknown guest that hacked the forum i created : http://tech-steel-gamers.userboard.net

the guest went into the portal which is restricted to members, moderators and administrators, the guest was staying in there and is believed to be logging conversions with me and a member

because he was a guest i could only ip ban him.

i banned his ip address several times

the first time i banned him he changed his ip address

the second time i ip banned him he copied a members ip address so i had no choice but to ban him and the member

there is no way to report his isp or ban his mac address so there is no way i can prevent him from coming back

i have all the ips logged, and a witness

i fear that he may come back and pose a severe security risk to the community there.

can somebody please help me on this, thank you

Hello,

Guest cannot get into area's that are set up to members and above. As long as you set up the permissions right. It will say its seeing Portal since that's the main page, but it would be a login screen.

[quote="MrMario"]Hello,

Guest cannot get into area's that are set up to members and above. As long as you set up the permissions right. It will say its seeing Portal since that's the main page, but it would be a login screen.[/quote

i have the permissions set up right, the hacker used a widget on the portal that guests are not allowed to see or use it

the widget was a voice and video chat, the guest was using that widget, and i have the evidence logged to prove that he was hacking the system to breach permissions

now i want to know how will i prevent him from coming back because there is nothing i can do to stop him when he can change his ip addresses to escape ip banning!!!

How do you know he/she was using the widget?

slg wrote:How do you know he/she was using the widget?

because he was listed in the chat widget when i was using it at the time

i checked to see if there was a guest online, there was, and when i checked it said he was viewing the portal


i tracked his ip address which has a feature that listed his activity on the forums, this showed me that he was using that video and audio widget

i banned him, kept changing ip's

could have been the member, if it was the same IP address, a dynamic Ip is unlikely to choose the same one as one of your members.

his computer or internet provider is meant to change his IP so stop banning him, it will only make future users unable to enjoy the site.
its more likely a problem with the widget, the user could just open it remotely using the pages source code.

its more likely that it was the member, who has his IP displayed as a guest before he could log in, so once he did log in you took the IP address that used your widget and mistook it as just a guest.

beta wrote:could have been the member, if it was the same IP address, a dynamic Ip is unlikely to choose the same one as one of your members.

his computer or internet provider is meant to change his IP so stop banning him, it will only make future users unable to enjoy the site.
its more likely a problem with the widget, the user could just open it remotely using the pages source code.

its more likely that it was the member, who has his IP displayed as a guest before he could log in, so once he did log in you took the IP address that used your widget and mistook it as just a guest.

the guest had a different ip than the member online, now i was online with the member at the time, i banned the guest ip, that did not ban the member

the guest changed the ip by changing the last two numbers at the end TWICE

then he copied the members ip address WHILE HE WAS LOGGED IN MEANING THERE WERE TWO PEOPLE WITH THE SAME EXACT ADDRESS ONLINE AT THE SAME TIME.

the guest came online AT A DIFFERENT TIME THEN THE MEMBER DID

the members ip is COMPLETELY different then the guest, if you feel its better for me to post the ip addresses so you'll understand better , i will do that

Like I said above, guest cannot view things that are set up for members and above. I'm 100% sure everything is working the way it should be.

MrMario wrote:Like I said above, guest cannot view things that are set up for members and above. I'm 100% sure everything is working the way it should be.

well your wrong, and i could prove that.

there is a hacker, the forum permissions are set right, there is no confusion with the members ip address

now lets get to the real issue.....

Please post the link to this widget or where the widget is that guest can not see and use.

slg wrote:Please post the link to this widget or where the widget is that guest can not see and use.

http://tech-steel-gamers.userboard.net/portal

the widget is setup there

Well I do not see any widgets. Are you talking about a widget that is a chatbox/shoutbox?

slg wrote:Well I do not see any widgets.

that's how it is supposed to be


i am talking about a voice and video chat widget called tokbox


i can post the embed if you need it

More likely he/she is using an IP address proxies. I also I have noticed my IP address is sometimes different on my forums I created.

slg wrote:More likely he/she is using an IP address proxies. I also I have noticed my IP address is sometimes different on my forums I created.

that could be it, i haven't noticed any difference in ip on my forums

the widget posted below

<script type="text/javascript" src="http://cdn.widgetserver.com/syndication/subscriber/InsertWidget.js"></script><script type="text/javascript">if (WIDGETBOX) WIDGETBOX.renderWidget('f08bae24-99c8-45ee-a85e-873c7eabce87');</script>
<noscript>Get the <a href="http://www.widgetbox.com/widget/videochat-videoconference">videochat-&-videoconference</a> widget and many other <a href="http://www.widgetbox.com/">great free widgets</a> at <a href="http://www.widgetbox.com">Widgetbox</a>! Not seeing a widget? (<a href="http://support.widgetbox.com/">More info</a>)</noscript>

here is the evidence

the hacker just came back

this is the guest listed in the chatbox in a restricted widget part of the forums

Could it be that the guest is using the same widget on their forum/website/blog?

Please don't double/triple post. Your post need to be separated by 24 hours before bumping, replying or adding more information. Please use the edit button instead!

[quote="slg"]Could it be that the guest is using the same widget on their forum/website/blog? [/quote


no, because his ip is listed accessing my forums, he is not some guy on some other site, if he was, he would speak.

if i ban the ip, he goes away

this guy idles, and is suspected to record all discussions

i took that photo a second ago, if you want to register and see for your self his annoying persistence, do so


i need him reported, he changes his ips all the time

Well the only thing I would say is do not use that widget.

slg wrote:Well the only thing I would say is do not use that widget.

i'll get rid of it, he'll still idle the crap out of the forums.

If you have the permissions set up correctly, he/she will not see anything. He/she will see the log in information.

since nobody has any other ideas on preventing ip changing hackers from coming back


i am making a new rule to auto ban index idling guests for a certain time period


i am going to report the hackers who copy members ip address's to there isp's whether they are or not, somebody needs to find THEM AND STOP THEM


there is nothing wrong with the permissions, widgets, member ip address changing, or anything else on MY END!!!!!

I HAVE THIS FIGURED OUT, NOW GIVE ME ONE METHOD THAT WILL STOP A PERSON'S REAL IP ADDRESS WITHOUT CONFUSION!

I WANT TO SOLVE THE PROBLEM WHICH IS ON THE HACKERS END, NOT MINE!

XD your going to complain to the company giving them internet?

There isnt any law against using a widget, computers and modems are SET to change there I.P address, a member can be logged in as himself and a guest and still have a different I.P

he could be using different devices, or have multiple browsers open.

There is NO way to stop a dynamic I.P address with I.P banning.

my advice is to get skype. a widget isnt fool proof. the guest could just go onto an account within your forum, copy the pages source code, and open the widget as a guest on your forum.

ill join your forum and have a look.
username: Nyx

beta wrote:XD your going to complain to the company giving them internet?

There isnt any law against using a widget, computers and modems are SET to change there I.P address, a member can be logged in as himself and a guest and still have a different I.P

he could be using different devices, or have multiple browsers open.

There is NO way to stop a dynamic I.P address with I.P banning.

my advice is to get skype. a widget isnt fool proof. the guest could just go onto an account within your forum, copy the pages source code, and open the widget as a guest on your forum.

its not the widget, it is the hacker on my forum accessing the widget and profiles and bypassing forum construction


none of you know even remotely whats going on


i am going to ignore any post that doesn't HAVE A SOLUTION

RIGHT NOW I HAVE LOST MY PATIENCE WITH YOU, AS ALL YOU GUYS HELP WITH IS AVOIDING THE PROBLEM AND TELLING ME I AM DOING SOMETHING WRONG


IF YOUR KNOWLEDGEABLE GO REGISTER ON MY FORUMS, I'LL GRANT YOU ADMIN, AND I CAN SHOW YOU THAT I AM NOT GRANNY CAROL'S WHO HAS NEVER RAN A FORUM BEFORE!!!!!!!!!


I AM CERTIFIED CCNA TECHNICIAN, PROVE ME WRONG BETA!

maybe try the htaccess tool. http://www.webmaster-toolkit.com/htaccess-generator.shtml

use this code (depending on what his I.P has been in the past)

Order allow, deny
Deny from 192.168.0.10
Deny from 212.155.
Deny from 1.2.3.4 5.6.7.8 127.0.0.1
Allow from all


The first line “Order allow, deny” tells the web server the “Order” in which the Allow and Deny directive will be evaluated. It simply says: Give access to all hosts that are not present in the Deny from list and are present in the Allow from list. With allow, deny order Allow list is looked up first and then the web server checks the deny from list. So as we have allow from all – all access is allowed. Then the allowed access is filtered based on the Deny lists. With allow,deny access is disabled by default.

If we change the order to “deny, allow” then all access is enabled by default and only users in the deny lists are blocked. However as the deny is being processed first allow directives will override any maching settings set in deny directives.

The default Apache order is deny,allow. So you can skip the first line in your .htaccess file if you do not need to change the order in which the Deny and Allow rules are being evaluated by the web server.

So to keep the htaccess simple you can just use:

Deny from 192.168.0.10
Deny from 212.155.


You can put several IP address in a Deny or Allow rule. For example:

Deny from 1.2.3.4 5.6.7.9

The IP addresses must be separated by a space or tab.

You can put entire networks as

Deny from 212.155.

This will block all users which IP addresses start with 212.155

Or to block all access to your site:

Deny from all

And then add another line to enable access only for yourself:

Allow from 1.2.3.4

Where “1.2.3.4” should be replaced with your computer IP address and add in the other users.

If starstriker says this is solved, this can be marked as solved.

We will wait until Star Striker says it is solved.

This hacker is looking for something if he just there im sorry but what i would do is change my forum address and pm the people u know the real address

that would be too easy

im thinking he's more interested in beating the guest then hiding from him, changing the address might not be a permanent solution, search engines will still show it due to its tags.

Please don't post IP in public! If this person was a hacker don't you think he or she would be taking your forum over and destroying it?

I bet this so called hacker (from what you say) has the url of the chatbox and able to login to the chat without using logging into the forum because guest has the url and can paste it in their browser.

Also if guest hasn't done anything harmful to forum, then why worry? You're worrying for something that is just nonsence.