Server Help :: View topic - Being hammered by exploited hosts

Server Help

Trash Talk - Being hammered by exploited hosts

Mine GO BOOM - Sat Jun 18, 2005 5:27 am
Post subject: Being hammered by exploited hosts

As of right now, there are a shitload of public IP address spamming the hell out of this site. Why? Because of a well known security exploit. How many? Right now, 539.

I'd like to ban them, as it is just annoying seeing 30 some guests. But I'm sure some idiot out there is actually using a computer that is sending out these virus exploits.

If your IP is in the following list, YOU SUCK!

Quote:

A380 - Sat Jun 18, 2005 6:46 am
Post subject:

Wow

CypherJF - Sat Jun 18, 2005 7:03 am
Post subject:

Interesting. However, you said it's a result of an exploit - according to that phpBB entry that was posted back Nov 04 - did you miss that recommended patch?

Solo Ace - Sat Jun 18, 2005 9:31 am
Post subject:

I doubt it, Cypher.
These viruses, or whatever they are, try to exploit the forums.
They fail, of course, because it was patched, but they're still probing.

Cyan~Fire - Sat Jun 18, 2005 11:22 am
Post subject:

Hm. I was wondering why the forums were slow yesterday.

Mine GO BOOM - Sat Jun 18, 2005 1:23 pm
Post subject:

CypherJF wrote:

did you miss that recommended patch?

I maybe running an older version of phpbb, but mine is as secure if not more secure than the newest one.

Its upto 1285 IPs now trying to get into these forums. And its hitting about everyone thats in Google's search engine. I wasn't touched by the last couple of waves of exploits, because my robots.txt blocked everyone. But then I got a couple of people emailing me wondering why they could never search Google and find threads here (as their search is much better). So, I allowed Google.

50% Packetloss - Sat Jun 18, 2005 2:35 pm
Post subject:

Sweet I'm not on the list. I say you ban all those IPs, I think this board displays a message to banned people, just change the message to information to help them clean up thier comp. You could also send emails to IPs which match up to users of this board.

Contempt+ - Sun Jun 19, 2005 3:58 pm
Post subject:

Any idea what might be causing it?

Solo Ace - Sun Jun 19, 2005 4:03 pm
Post subject:

A worm, duh.

Solo Ace - Mon Jun 20, 2005 8:26 pm
Post subject:

Exclude Google again, allowing indexing has only brought more bad than good things to these forums.

I know phpBB's search feature sucks, which sometimes annoys me, but it's not like Google does anything good to these forums either.
Google only indexes small parts of dynamic pages, so using it to search through topics is worthless.

Whenever a new security hole was found another idiot writes some worm which uses google to find the phpBB forums to use as victim.

Let's just replace the search feature with a better one, maybe the "external" htDig project?

And remove these forums from Google, so whenever some stupid program looks for sites running phpBB, it won't come here, it's not like we need Google, it only brings spam and danger.

1stStrike - Mon Jun 20, 2005 8:31 pm
Post subject:

Ah man, sorry mgb. I was aiming for ssforum but I accidently clicked on your IP.

Cyan~Fire - Mon Jun 20, 2005 9:01 pm
Post subject:

You and your darned government computers, 1st.