DragonByte Tech | vBulletin Mods & Addons - Powered by vBulletin





User Tag List

Thanks Thanks:  0
Likes Likes:  0
Dislikes Dislikes:  0
Results 1 to 2 of 2

Thread: Temporary IP Ban - Time based


Forum: DragonByte Security Lite Support

Questions & Answers for DragonByte Security.
Click here to buy!

  1. #1
    Junior Member
    Level 0 (400 Loyalty Points)

    User InfoThanks / Tagging InfoGifts / Achievements / AwardsActivity Stats
    Join Date
    Sep 2013
    Posts
    2
    Rep Power
    0

    Exclamation Temporary IP Ban - Time based

    Hey guys. The major problem with this plugin is that attackers are now spoofing legitimate users IP addresses. Not sure HOW they are doing so, but they are.

    SO, the result is that the attacker will attempt brute force with existing user IP address and it then bans the IP address.

    Then, the real user comes to the site and they are banned.

    The first few times this happened, I didn't think much of it. Now it is occurring every single day multiple times per day.

    I think a time based IP ban to STOP the brute force attack would work great. Potentially, the real user could hit the site during that time frame, but that's still better than having to go in every day and clear out all the banned ips. Typically about 20 per day now.

    It is to the point where I NEED this mod or will be forced to uninstall the plugin and look for a different solution.

    Thanks for your consideration.

  2. #2
    Founder
    Level 0 (0 Loyalty Points)
    Belazor's Avatar
    User InfoThanks / Tagging InfoGifts / Achievements / AwardsActivity Stats
    Join Date
    Dec 2009
    Location
    Glasgow, United Kingdom
    Age
    30
    Posts
    27,743
    Blog Entries
    13
    Rep Power
    10

    Default

    The problem with that is that removing an IP address from the IP Ban setting in the AdminCP isn't easy.

    It's certainly something we can take into consideration, but you would be better off using a low-level solution like the ConfigServer Firewall & Login Failure Daemon as it will be much more powerful than anything we could create.
    Fillip Hannisdal
    Founder & Programming Director
    DragonByte Technologies http://www.DragonByte-Tech.com


    Please do not Private Message me with support requests or product questions. PMs are only for exchanging sensitive information (like FTP / AdminCP logins).
    Please do not Private Message me with business related queries (refunds, complaints, feedback, etc). Decado is the person to PM for those issues.
    Please do not Private Message Decado with support requests or forum errors.

    When I say "Hotfix Released" it means you should re-download the product and re-upload the files.
    Like our products? Want to be notified on social media networks when we release updates or new products? Click the buttons below to Like us on Facebook, Follow us on Twitter and Follow us on Google+!

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. [vB 4.2.x] Resource Savings Statistics basing off of UTC time and not server time
    By bzcomputers in forum vB Optimise Lite Support
    Replies: 1
    Last Post: 18th February 2014, 14:10
  2. [vB 4.2.x] Signature based on ID
    By jluerken in forum Default Staff Signature
    Replies: 0
    Last Post: 12th June 2013, 06:18
  3. [vB 3.8.x] Make this real time button - or intelligent selective real time
    By roycerus in forum AJAX Threads Lite Support
    Replies: 2
    Last Post: 21st November 2011, 10:55

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
This website uses cookies
We use cookies to store session information to facilitate remembering your login information, to allow you to save website preferences, to personalise content and ads, to provide social media features and to analyse our traffic. We also share information about your use of our site with our social media, advertising and analytics partners.