Geeklog Forums

hi, all.

yesterday I download BB2 and install for 18 hrs on my site. today I login to my Admin cpanel and I get more than 300+ IP show up on the BB2 page.

do this is a normal for Bad behavior or I have to do some thing to prevent this?

thank your and need your help.

hollis.

this is a screenshot:

screenshot

We run a few Geeklog and glFusion websites and to our experience we need to say that Bad Behaviour 2 is over reacting a bit. For example, it beliefs that all Thai IP's addresses are bad, in your picture example you have one also, it is the 58..... IP address.

We not uses Bad Behaviour and saw our real visitors and websites feedback going up, if you ask me Bad Behaviour 2 is the one who is behaving badly.....

thank you for your reply.

I do believe you, because I think my site most visitor are from other country than USA.
since this post I have more than 100+ IP show up on BB2. there are 320, and now 425 IP after this post only. do this mean those visitor are bad because they are "Prohibited header 'Proxy-Connection' present"

thanks.

any idea?

In my experience: If in doubt, Bad Behavior is usually right.

If you see some IP address retrying over and over again, often for hours, you can be sure it's not a human.

What you could try, though: BB is using a blacklist to block some IP addresses. Try commenting it out (in public_html/bad-behavior/blackhole.inc.php).

Overall, however, the internet is not a nice place any more. You may have heard the estimates that 90% of all emails sent these days are spam. The same will soon be true for web traffic. We've had days were 30% of the traffic that hit geeklog.net were inclusion attempts. And that's only the lame hacking attempts (not spam - I don't have any off-hand figures for spam).

bye, Dirk

The question is with what do you compare it? It is probably the first time after installing BB that you understand how many spam bots and other unwanted script access your site.

Just take the example 58.211.75.8. It is easy to check that through google. This IP has been spamming a lot:
http://fr.wikipedia.org/wiki/Discussion_Utilisateur:58.211.75.8
http://www.burgdorf-web.ch/site/basis.php

300-400 blocked IPs on a site is not unusual though you may comment out the blacklist Dirk talked about.

Most ISP use a sort of outgoing proxy, which tricks many SPAM filters. The Thai internet providers say this helps them to save on international band width.

Anyway if I active BB2 on one of our most popular Thai websites, we get so much email with complains that it takes us days to answer them. Also I'm sure that BB2 is blocking some spiders of less famous search engines. This search engines can be your local domestic search engine....

We use on all our websites captcha, SLV and SNL and we have totally no problems with spam.

Isn`t it normal to use outgoing proxies? Anyway I use BB1 and no captcha, Spam-x at all. If problems arise I check time and date and the log files. Indeed I have 1 user who is accessing in a strange way and we have not found out yet what happens. Probably he got a spy programme or harvester on his PC.

I just checked one more IP of the screenshot through google: 89.149.253.21 Another spammer.

As for me I can`t understand why you don`t want to block spam bots right when they enter your webspace. If you have problems then check in detail and turn off the blacklist at any rate!

You may want to duiscuss further problems, which might indeed exist in your country with the programmer of BB. I could imagine he is grateful for any hint.

Just to clarify: BB doesn't block proxies. It does however check if the requests are proper HTTP requests and it seems quite a few proxies out there simply aren't sticking to the HTTP standard and/or are badly configured. And then they get caught by Bad Behavior.

bye, Dirk

thank you for all.

I have experience with BB2 for about 48 hrs now. every time I login the page very slow loading. every time I click save button the page respond every slow too.

thank your for your input.

bye.

Did you comment out the blacklist? Did you check some more IPs of your screenshot if they are spammers?

Hello people,

We decided to give Bad Behaviour2 another try, and run directly into a problem. Of course we did upgraded our BB2 to the latest available on this website, and upgraded the plugin.

The website is one of our test websites, but still gets about 3000 visitors a day. Until now the log entries are only showing 191 banned visitors which are all dated on the last time BB2 was active (about 6 months ago).

So it seems that BB2 is not writing to the log, we did not encounter any problems during the update...

Hello,

this is a old post since I uninstall BB last time. now I reinstall it again and I want to know how to comment it out the blacklist to block all spammer IP?

thanks for help.

okay when I turn this line to [return (strpos($address, ":")) ? TRUE : FALSE;] true and I get BB block. and I turn it back than I am ok.

it seen that the problem is my side. my computer have a anti virus protaction that already expire.

this what I think right now.