Page Index Toggle Pages: 1
Topic Tools
Normal Topic UNION Abuse Detected? (Read 1,098 times)
xnoddyx
Support Team
Documentation Team
YaBB Moderators
YaBB Next Team
Beta Testers
****
Offline



Posts: 1,587
Location: UK:Scotland/livingston

None
Re: UNION Abuse Detected?
Reply #3 - Jul 16th, 2013 at 1:29am
Post Tools
as
Bill Myers wrote on Jul 15th, 2013 at 11:12pm:
RonS2 is correct. YaBB is doing its job at keeping that particular IP address from spamming your forum. You can do the following to stop all of those messages (based on YaBB 2.4 - adjust accordingly):


also goto admin > The Guardian >

find Global and Server Settings
Use The Guardian™ to protect your board?
check the checkbox for this < looks like you have check the checkbox for this next

Activate .htaccess to add IP blocks on server level?
check the checkbox for this then in

Enter IP addresses or (partial) domain names you want blocked on server level?

enter the ip 96.44.189.98 in there and save see pic

Edited:
to add some more info to that ip for you from
http://www.ip-adress.com/ip_tracer/96.44.189.98
96.44.189.98 IP address location & more:
IP address [?]:
96.44.189.98 [Copy]  [Whois] [Reverse IP] 
IP country code:
US
IP address country:
ip address flag United States
IP address state:
California
IP address city:
Los Angeles
IP address latitude:
34.0522
IP address longitude:
-118.2437
ISP of this IP [?]:
OC3 Networks & Web Solutions, LLC
Organization:
QuadraNet
Host of this IP: [?]:
axigy2.torservers.net [Whois] [Trace] 
Local time in United States:
2013-07-15 18:22
« Last Edit: Jul 16th, 2013 at 1:36am by xnoddyx »  

gipa.jpg ( 23 KB | 34 Downloads )
gipa.jpg

YaBB install help video
1. what yabb forum are you running and the url
2. describe in as much detail as you can what happens and also post screenshots if you can
3. please be patient we live in different time zones and have other commitments but we will help you
as bill and ted say (Be excellent to each other)
Back to top
IP Logged
 
Bill Myers
God Member
Beta Testers
*****
Offline



Posts: 1,592
Location: Los Angeles

YaBB 2.4
Re: UNION Abuse Detected?
Reply #2 - Jul 15th, 2013 at 11:12pm
Post Tools
------ wrote on Jul 15th, 2013 at 9:23pm:
... you can just stop The Guardian from sending you emails ...

RonS2 is correct. YaBB is doing its job at keeping that particular IP address from spamming your forum. You can do the following to stop all of those messages (based on YaBB 2.4 - adjust accordingly):

Go to your Admin Center, then Security Center, and then The Guardian™ ... scroll down to Scripting Blocking and uncheck "Do you want an email notification on any detected attempts?"

Then scroll down to UNION Blocking and do the same by unchecking "Do you want an email notification on any detected attempts?"

I usually like to have email notifications except of course when hundreds of them come in at the same time, which as you now know can happen.

Good luck, and enjoy your YaBB forum. Wink

  

Morning, noon, or night, have a great one!

Note: This forum doesn't allow for us to freely edit our posts or topics to make corrections as needed, so please remember to look for subsequent posts if you see any mistakes or outdated information. Sorry for the inconvenience.
Back to top
IP Logged
 
------
Senior Member
Beta Testers
****
Offline



Posts: 527
Re: UNION Abuse Detected?
Reply #1 - Jul 15th, 2013 at 9:23pm
Post Tools
shooter56 wrote on Jul 15th, 2013 at 9:03pm:
They are all coming from the same IP address - 96.44.189.98 - which I have banned in the Admin panel. But the emails just keep on coming.



You banned them and they as still coming?

Do you have access to your .htaccess file? If so add a separate line.
Quote:
deny from 96.44.189.98


Or you can just stop The Guardian from sending you emails since its doing it jobs.

I just upgraded to 2.5.2 - real nice!
  
Back to top
 
IP Logged
 
shooter56
Full Member
***
Offline



Posts: 104
UNION Abuse Detected?
Jul 15th, 2013 at 9:03pm
Post Tools
I have a YaBB 2.1 forum and, yes, I know it's long overdue for an upgrade.

That having been said, in the last 12 hours I have received over 200 emails from The Guardian.

Some say,

"Scripting abuse detected..." along with more information about the abuse.

Others say,

"UNION abuse detected..." along with more information about that one.

They are all coming from the same IP address - 96.44.189.98 - which I have banned in the Admin panel. But the emails just keep on coming.

Has anyone experienced this issue and know how I might stop it?

Thanks in advance for your input.
  
Back to top
 
IP Logged
 
Page Index Toggle Pages: 1
Topic Tools
 
  « Board Index ‹ Board  ^Top