by lordtygr » Sun May 31, 2009 1:36 am
I guess you could say that I figured them out before they could cause any damage. I was noticing how we had over 70 members yet there is still only a certain group of people that have ever posted. I then looked at the dates they joined the siteand date they were last active. most of them were last active between a couple of minutes to two hours after they first joined the site. I then started noticing that many of them shared the same IP address. I set one in my browser and luckily firefox blocked It as a known attack site. I then ran a /whois on the IP addresses and saw they were mostly coming from Russia, Latvia, and other European contries. next I typed the IPs into google to see what would come up. all sorts of forum security websites came up listing the IP addresses as known threats. out of almost 30 members that I IP banned from the site, only about 7 actual IP addresses are on the list if that tells you anything. there are still a few members I'm not sure about but I'm giving them the benefit of the doubt as I was not able to fnd enough concerete evidence to ban them.
"Hear no Evil"(2) JBL GT410's w/ Scoche SA3002 Amp
"See no Evil"HID's by EuroEffects in Headlights and Foglights 35w 8000k
Tint: 30% Charcoal Front, 20% Charcoal Rear, 40% Silver Sunroof
CF 3" Stubby antenna
"Speak no Evil"Hot-water Bypass
WORKS Axleback Exhale Exhaust
injen Cold Air Intake w/ Hydrosheild
RRM Timing Control Module (aka Testicular 3000)