3.3.x Extensions Database 3.2 / 3.3 ⇒ Singapore slinger

[SpIdErPiGgY]

https://www.hostinger.com/tutorials/hta ... g-htaccess

[Fast_Eddie]

But I will just keep a eye on usage in my server control panel and move on

Useage has gone down from 500 plus per day to around 250-300 but have also been banning IP's on server AND ACP

[ivailo95]

But I will just keep a eye on usage in my server control panel and move on

Useage has gone down from 500 plus per day to around 250-300 but have also been banning IP's on server AND ACP

My advice to you is, to you CloudFlare, then use ClaudFlare rules to restrict unwanted bots or users

[Sniper_E]

Bullshit advice.

[Fast_Eddie]

My advice to you is, to you CloudFlare, then use ClaudFlare rules to restrict unwanted bots or users

What is ClaudFlare rules? (( I'll google it ))

Edit: Sounds over my head

[clight77]

Is robots.txt a part of Martins slinger, I can't remember or even if it is a current thing anymore.
Just a thought.

[Fast_Eddie]

Weekend project: (( I get 2 days off in a row! ))

In a effort to kill bot/visitor hits to the phpbb index I'm going to create a HTML page to replace the main board URL
DM has a ext. to help with this . So I'll be working on that. But there is a way in the ACP where you can name the "homepage" I have done this before and had success. Will be looking at both this weekend
Thanks for the input guys!!!!

[Sniper_E]

Maybe it's the host you are using for your site. I've never heard of 500 plus bots attacking a site. That's crazy.
Man I have been building servers and setting sites up for over 30 years and I have NEVER had a problem with bots.
Of course I know hackers are wiser than they were 10 or 20 years ago. But still that's a lot of attacks.

Martin installed singapore slinger on my site when he made it but I had no problems with attacks before that.
I thought this slinger was created to block China out is all. But martin would have to educate me on how all this stuff works.
I've setup .htaccess files to block all bots but I have no idea what's in this slinger. Martin wants it so it's in, I step back out of his way... or else.

[Fast_Eddie]

HostGator is my server. Have always had 2 boards. Got rid of one of them, but that was off my main account (url) Never had this sort of thing happen either and have had it now maybe 5-6 years? Not sure where they came from but i suspect maybe because i had the URL to the board posted in profile here at DMs board and .com I have sense took those down (about 3-4 weeks ago) Just got home for the day and currently sitting at 200 hits (but the day not over yet) I almost its just a few ppl/bots? because they all come in bunches ...like 7-8 at a time. Would you really consider that a attack?

EDIT: I forgot to mention they are ALL 100 percent Hong-Kong IPs .....but i'm sure that can be spoofed also

[clight77]

Are these bots trying to register to your site?
If so use the Q&A CAPTCHA that is in ACP
Also I think DMZX has an ext that can be used, can't remember the name tho..

Also maybe try ext "Stop Forum Spam"

[Fast_Eddie]

Are these bots trying to register to your site?
If so use the Q&A CAPTCHA that is in ACP
Also I think DMZX has an ext that can be used, can't remember the name tho..

Also maybe try ext "Stop Forum Spam"

Board is disabled so registration is shut off. But they do visit that link, and others like
FAQ, UCP, etc..

[clight77]

Are these bots trying to register to your site?
If so use the Q&A CAPTCHA that is in ACP
Also I think DMZX has an ext that can be used, can't remember the name tho..

Also maybe try ext "Stop Forum Spam"

Board is disabled so registration is shut off. But they do visit that link, and others like
FAQ, UCP, etc..

I would definatetly use some sort of captcha and the Stop Forum Spam also they are both easy and they may help solve your issue, just my 2 cents worth.

[Fast_Eddie]

Will try that tonight , also want to set up new homepage landing spot
Thanks! :)
( i cant type and talk to wife at the same time lol)

[SpIdErPiGgY]

Also I think DMZX has an ext that can be used, can't remember the name tho..

This?
viewtopic.php?t=3957

[Fast_Eddie]

Sorry, was not my intention to hijack this topic! :( But this problem continues ...even with a new domain name / URL
I kind of think these are not bots because the board has them listed as 'guest' . The biggest reason this is driving me crazy is bc its draining my CPU usage on server. But now also getting hits from other countries (Spain, USA, Germany, etc....but the all have the same OS and Browser. Which is making me think martins ext is kind of working? And there changing countries to avoid it? Is this possible?
Here is a sample WHOIS if that helps?

Code: Select all

% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '101.44.248.0 - 101.44.251.255'

% Abuse contact for '101.44.248.0 - 101.44.251.255' is 'hwssecurity@huaweicloud.com'

inetnum:        101.44.248.0 - 101.44.251.255
netname:        Huawei-Cloud
descr:          Huawei Cloud
country:        HK
admin-c:        HIPL7-AP
tech-c:         HIPL7-AP
abuse-c:        AH905-AP
status:         ALLOCATED NON-PORTABLE
mnt-by:         MAINT-HIPL-SG
mnt-irt:        IRT-HIPL-SG
last-modified:  2022-07-29T09:46:22Z
source:         APNIC

irt:            IRT-HIPL-SG
address:        15A Changi Business Park Central 1 Eightrium # 03-03/04, Singapore 486035
e-mail:         hwssecurity@huaweicloud.com
abuse-mailbox:  hwssecurity@huaweicloud.com
admin-c:        HIPL4-AP
tech-c:         HIPL4-AP
auth:           # Filtered
remarks:        hwssecurity@huaweicloud.com
remarks:        hwssecurity@huaweicloud.com was validated on 2023-10-10
mnt-by:         MAINT-HIPL-SG
last-modified:  2023-10-10T02:18:46Z
source:         APNIC

role:           ABUSE HIPLSG
address:        15A Changi Business Park Central 1 Eightrium # 03-03/04, Singapore 486035
country:        ZZ
phone:          +000000000
e-mail:         hwssecurity@huaweicloud.com
admin-c:        HIPL4-AP
tech-c:         HIPL4-AP
nic-hdl:        AH905-AP
remarks:        Generated from irt object IRT-HIPL-SG
remarks:        hwssecurity@huaweicloud.com was validated on 2023-10-10
abuse-mailbox:  hwssecurity@huaweicloud.com
mnt-by:         APNIC-ABUSE
last-modified:  2023-10-10T01:54:50Z
source:         APNIC

role:           HUAWEI INTERNATIONAL PTE LTD administrator
address:        15A Changi Business Park Central 1 Eightrium #03-03/04, Singapore  486035
country:        SG
phone:          +8618730601505
e-mail:         wanggang222@huawei.com
admin-c:        HIPL7-AP
tech-c:         HIPL7-AP
nic-hdl:        HIPL7-AP
notify:         wanggang222@huawei.com
mnt-by:         MAINT-HIPL-SG
last-modified:  2021-06-04T07:42:42Z
source:         APNIC

% Information related to '101.44.248.0/22AS136907'

route:          101.44.248.0/22
origin:         AS136907
descr:          HUAWEI INTERNATIONAL PTE. LTD.
                15A Changi Business Park Central 1 Eightrium #03-03/04
mnt-by:         MAINT-HIPL-SG
last-modified:  2022-07-29T10:00:39Z
source:         APNIC

And CPU usage:

Code: Select all

 Memory usage
28.98 GB of 57.58 GB Used (27.34 GB cached)

(((NO members, just me))