I'm running the latest version of XOOPS and have protector running and set up to hit project honeypot. It appears to be doing a good job, however, we just received an e-mail from a user who received the following message when he attempted to post:
Quote:

I checked and the username does exist and has been activated by the site admin.

There is one address in the protector bad IP field: 85.237.27.136:1241610254

I'm not sure how that IP got there. Does protector write IPs there? or is that list added to manually by the admins?

I have no way of getting the user's IP address to see what's going on there.

Suggestions?

and does anyone know where the english version of the protector documentation is located?

Thanks,
Betty

So nobody knows?

Have you tried asking GIJoe (the developer)?

Was that the Ip of the one that complained?
Check the Protector logs to see if there was something logged about that IP.
Sometimes users can trigger Protector to ban them by a (auto)repeated F5 (refresh) of the browser, which is similar to a DoS attack.