How can I Temporarily Take My Site Offline?
Using Jamroom
Great. I hereby request to be updated and upgraded
Forum Activity for @adolygwr
How can I Temporarily Take My Site Offline?
Using Jamroom
Yes sounds like a good idea. I have to rush out now but will contact support when I get back. Does this also mean I will be upgraded to PHP version 7.1.0 or newer! ?
How can I Temporarily Take My Site Offline?
Using Jamroom
Well....maybe so BUT this number of dodgy requests is new in my experience and I have been monitoring for a while. Many thanks for taking a look.
How can I Temporarily Take My Site Offline?
Using Jamroom
I should add that I took the site down last night for about 6 hours to cool things down. The site is back up now and the attacks are continuing.
How can I Temporarily Take My Site Offline?
Using Jamroom
I have been administering AmeriCymru since 2006. It was formerly hosted on the Ning platform. Obviously over the last 17 years I have formed a pretty good idea of what constitutes 'normal' traffic on the site. Yes there are constant fluctuations but I can usually account for those....unusually popular articles, mailshots etc. The current traffic patterns bear no relation to the norm.
1. I frequently check 'suspicious' IP's on Abuse IPD. Recently I have been visited by many Tor nodes and a large number of other IP's that score 100% 'Confidence of Abuse' on that site. When I click one of these off another dirty IP frequently takes its place almost instantly.
2. Many of the IP's I see in the logfiles are spoofed. That is to say, they purport to be from the US, Australia or Canada and they turn out to be from Romania, Bulgaria, Singapore, Wuhan etc. This is not entirely new BUT the sheer volume of such visits IS.
3. For the last three days there have been constant image download requests , each from a different IP. These 'visitors' do not browse the site at all. They simply appear attempting to download an image ( different image, different IP every time ) and then they sit there without going anywhere else on the site. There have been hundreds if not thousands of these over the past few days.
4. Yesterday when I looked at the logfiles I saw 2 IP's requesting "..../banned/browse". This of course is an admin page which is only viewable by logged in admins . SO....they wouldn't have been able to view it BUT why did they request it?
I am happy to provide screenshots of all this 'activity' in my logfiles if necessary.
updated by @adolygwr: 10/25/23 02:02:42PM
How do I ban an invalid IP address?
Using Jamroom
k....will do next time it occurs. I'm also getting partial IPV6 addresses which don't ban
How do I ban an invalid IP address?
Using Jamroom
I sometimes find IP's like this listed in my logs:-
tenv:NaN:jndienv:NaN::env:NaN:ldapenv:NaN::10
When I attempt to ban I get the message "Invalid IP address". Is there a way to get rid of this twerp? Can I ban him some other way?
updated by @adolygwr: 06/25/23 04:35:43AM
