WFTW Trackchair Auction - Saturday May 30 @ 8pm EDT - PREVIEW

Chinese bots hammering BS

Announcements and Info
User avatar
MaxGravy
Site Admin
Posts: 18277
Joined: Sat Jul 18, 2009
Location: FEMA Region VI

Chinese bots hammering BS

Postby MaxGravy » Sat Mar 21, 2020

This has been happening every day. I've watched it unfold several times. Dozens of bots originating from China start hitting the site all at the same time. I can easily trace their IPs to see where they're coming from. I've tried blocking their IPs but they switch them faster than I can block them. They have thousands of IPs to attack from. When the site slows down and you get errors, it's probably because of the Chinese bots. They can only see the public threads but they also try to "Brute Force" their way into the backend. I get an email every time a Brute Force attack takes place. Our server automatically blocks those IPs but they just move on to a different one.

If you're having trouble with the site, go to the bottom of the home page and check how many guests are online.

chinese-bots.jpg
You do not have the required permissions to view the files attached to this post.
Quarantine is when you restrict the movement of sick people.

Tyranny is when you restrict the movement of healthy people.

User avatar
shinnosuke
Liberty Supporter
Posts: 2020
Joined: Sat Oct 08, 2011
Location: Texas

Re: Chinese bots hammering BS

Postby shinnosuke » Sat Mar 21, 2020

I’m ignorant about these things, Randy, but is there something the members can do to help offset the effects of the attacks?
Looking for Goldbacks? viewtopic.php?f=98&t=32677
Gold is money everywhere. Our goal is to fill the world with local Goldback currencies.

User avatar
MaxGravy
Site Admin
Posts: 18277
Joined: Sat Jul 18, 2009
Location: FEMA Region VI

Re: Chinese bots hammering BS

Postby MaxGravy » Sat Mar 21, 2020

shinnosuke wrote:I’m ignorant about these things, Randy, but is there something the members can do to help offset the effects of the attacks?


Not to my knowledge. I've been researching how to block all of China but it isn't easy. One option is to use Cloudflare, but I don't trust that company. They require that we change our DNS (domain name server) to point to their servers, which means all traffic goes through them first. There's no way I will do this.

I'm open to all suggestions.
Quarantine is when you restrict the movement of sick people.

Tyranny is when you restrict the movement of healthy people.

User avatar
MaxGravy
Site Admin
Posts: 18277
Joined: Sat Jul 18, 2009
Location: FEMA Region VI

Re: Chinese bots hammering BS

Postby MaxGravy » Sat Mar 21, 2020

It's happening again, right now. Coincidence that I started a public thread with the word Chinese?
Quarantine is when you restrict the movement of sick people.

Tyranny is when you restrict the movement of healthy people.

User avatar
MaxGravy
Site Admin
Posts: 18277
Joined: Sat Jul 18, 2009
Location: FEMA Region VI

Re: Chinese bots hammering BS

Postby MaxGravy » Sat Mar 21, 2020

Over 100 Chinese bots hammering us right now. Here's an example:

Guest IP: 117.64.149.101 » Whois
Mozilla/5.0 (Linux; Android 7.0; FRD-AL00 Build/HUAWEIFRD-AL00; wv)

Location For an IP: 117.64.149.101
Continent: Asia (AS)
Country: China IP Location Find In China (CN)
Capital: Beijing
State: Shanghai
City Location: Shanghai
ISP: China Telecom Anhui
Organization: China Telecom Anhui
Quarantine is when you restrict the movement of sick people.

Tyranny is when you restrict the movement of healthy people.

User avatar
AGhead
Platinum Supporter
Posts: 2872
Joined: Sat May 17, 2014
Location: In Arkansas

Re: Chinese bots hammering BS

Postby AGhead » Sat Mar 21, 2020

Luv ya for being on the front line! We don't take you for granted! Thanks for your protection.
Hope the Commie Chinese aren't looking for my mini arsenal ;)
(because it sunk with my ship, all lost)
.
.......just saying......
.


Image
Proverbs 27:17 "As iron sharpens iron, so a friend sharpens a friend."

User avatar
Brick's
Supporter
Posts: 3146
Joined: Wed Dec 19, 2012
Location: 'Cuse

Re: Chinese bots hammering BS

Postby Brick's » Sat Mar 21, 2020

MaxGravy wrote:It's happening again, right now. Coincidence that I started a public thread with the word Chinese?


I was going to say but, you took the words right out of my mouth except I'd have said "Chinese Virus".
"The darkest places in hell are reserved for those who maintain their neutrality in times of moral crisis". Dante Alighieri

User avatar
agnostic
BS Supporter
Posts: 2861
Joined: Sun Jul 20, 2014
Location: PNW

Re: Chinese bots hammering BS

Postby agnostic » Sat Mar 21, 2020

What is the purpose of the hammering?
It is better to remain silent and be thought a fool, than to open your mouth and remove all doubt. ... Honest Abe

User avatar
grantwoodisgold
Gold Supporter
Posts: 2546
Joined: Mon Oct 20, 2014

Re: Chinese bots hammering BS

Postby grantwoodisgold » Sat Mar 21, 2020

can we have a code name for chinese and change thread titles to the code name, or do they read thread content too?
"SAUSAGE FLAVORED MEAT PELLETS, GRADE D BUT EDIBLE"
"Better 1 or 2 years early than 1 day late"

User avatar
fredzoyt
Spiritual Supporter
Posts: 6315
Joined: Sat Jul 11, 2009
Location: Manassas,VA
Contact:

Re: Chinese bots hammering BS

Postby fredzoyt » Sat Mar 21, 2020

agnostic wrote:What is the purpose of the hammering?


The overload can shut down a site... that's one purpose.
http://www.the-highway.com/ultimate_questions.html
http://www.gotquestions.org/way-of-salvation.html
Image

Phil. 2:10 so that at the name of Jesus EVERY KNEE WILL BOW, of those who are in heaven and on earth and under the earth,

User avatar
Purple and Gold
Posts: 10040
Joined: Mon Jul 13, 2009

Re: Chinese bots hammering BS

Postby Purple and Gold » Sat Mar 21, 2020

I say we start posting fake "China" news, give them something to cry about (like my mama used to tell us kids)

Thanks for all you do, MaxGravy :thumbup:
ImageImageImage

AuMax
Gold Supporter
Posts: 1959
Joined: Sun Apr 25, 2010

Re: Chinese bots hammering BS

Postby AuMax » Sat Mar 21, 2020

Thanks Randy for the info... Wondering how their bot activity compares to anything you've seen out of Russia.
ImageImage
Image
Respect for the truth comes close to being the basis for all morality"
-Frank Herbert

User avatar
MaxGravy
Site Admin
Posts: 18277
Joined: Sat Jul 18, 2009
Location: FEMA Region VI

Re: Chinese bots hammering BS

Postby MaxGravy » Sat Mar 21, 2020

AuMax wrote:Thanks Randy for the info... Wondering how their bot activity compares to anything you've seen out of Russia.


We see a lot of bots from Russia and Ukraine also, but nothing like we've been seeing from China this last week. I don't think they're trying to shut down the site with a DDOS. Most likely they're looking for information being posted about the Chinese virus. They can't log in so they can only see the public forums. However this forum, BS news, is a public forum.
Quarantine is when you restrict the movement of sick people.

Tyranny is when you restrict the movement of healthy people.

User avatar
InfleXion
Posts: 4792
Joined: Fri Sep 30, 2011
Location: Puget Sound

Re: Chinese bots hammering BS

Postby InfleXion » Sat Mar 21, 2020

fredzoyt wrote:
agnostic wrote:What is the purpose of the hammering?


The overload can shut down a site... that's one purpose.

If you can crash the web server it may be possible to get access to portions of the site that are usually restricted. In particular getting the exact version of PHPBB to cross reference against known exploits, which can lead to a site hack in extreme circumstances. There's not much to gain by solely shutting the site down unless somebody really wants to silence BS.

I don't doubt this is being looked into or even done already, but just in case, if there are any commonalities among the hammering IP addresses it may be worth blocking the entire block. For example 117.64.0.0 - 117.64.255.255. However, if the IPs are truly random they likely have control of a botnet and/or Internet worm which will come from any infected device and is much harder to block. Although if they had a worm it would likely be more effective at causing downtime.
Last edited by InfleXion on Sat Mar 21, 2020, edited 1 time in total.
Silver: the Rodney Dangerfield of precious metals
○ A man is defined by his actions, not his memories ~Kuato
○ Be careful how you judge people, most of all friends. You don't sum up a man's life in one moment. There are no cold answers. A man's life is not the bricks. It's the mortar. It's the stuff that lays between, the stuff you can't see
○ So do not fear, for I am with you

User avatar
MaxGravy
Site Admin
Posts: 18277
Joined: Sat Jul 18, 2009
Location: FEMA Region VI

Re: Chinese bots hammering BS

Postby MaxGravy » Sat Mar 21, 2020

InfleXion wrote:
fredzoyt wrote:
agnostic wrote:What is the purpose of the hammering?


The overload can shut down a site... that's one purpose.

If you can crash the web server it may be possible to get access to portions of the site that are usually restricted. In particular getting the exact version of PHPBB to cross reference against known exploits, which can lead to a site hack in extreme circumstances. There's not much to gain by solely shutting the site down unless somebody really wants to silence BS.

I don't doubt this is being looked into or even done already, but just in case, if there are any commonalities among the hammering IP addresses it may be worth blocking the entire block. For example 117.64.0.0 - 117.64.255.255. However, if the IPs are truly random they likely have control of a botnet and/or Internet worm which will come from any infected device and is much harder to block. Although if they had a worm it would likely be more effective at causing downtime.


I've already put many ranges into the block. On our cpanel I can just enter 117.64.0. and it blocks 0 thru 255.
Quarantine is when you restrict the movement of sick people.

Tyranny is when you restrict the movement of healthy people.

User avatar
shinnosuke
Liberty Supporter
Posts: 2020
Joined: Sat Oct 08, 2011
Location: Texas

Re: Chinese bots hammering BS

Postby shinnosuke » Sat Mar 21, 2020

哥哥,你從哪裡學到的功夫呢?
Looking for Goldbacks? viewtopic.php?f=98&t=32677
Gold is money everywhere. Our goal is to fill the world with local Goldback currencies.

User avatar
Purple and Gold
Posts: 10040
Joined: Mon Jul 13, 2009

Re: Chinese bots hammering BS

Postby Purple and Gold » Sat Mar 21, 2020

shinnosuke wrote:哥哥,你從哪裡學到的功夫呢?



當您可以拿走我手上的鵝卵石時,您就會知道該走了
Last edited by Purple and Gold on Sat Mar 21, 2020, edited 1 time in total.
ImageImageImage

User avatar
AGhead
Platinum Supporter
Posts: 2872
Joined: Sat May 17, 2014
Location: In Arkansas

Re: Chinese bots hammering BS

Postby AGhead » Sat Mar 21, 2020

MaxGravy wrote:
AuMax wrote:Thanks Randy for the info... Wondering how their bot activity compares to anything you've seen out of Russia.


We see a lot of bots from Russia and Ukraine also, but nothing like we've been seeing from China this last week. I don't think they're trying to shut down the site with a DDOS. Most likely they're looking for information being posted about the Chinese virus. They can't log in so they can only see the public forums. However this forum, BS news, is a public forum.

D@#! I take all back I said about the Commie bastids. Both Russia-Bernie and China
.
.......just saying......
.


Image
Proverbs 27:17 "As iron sharpens iron, so a friend sharpens a friend."

User avatar
MaxGravy
Site Admin
Posts: 18277
Joined: Sat Jul 18, 2009
Location: FEMA Region VI

Re: Chinese bots hammering BS

Postby MaxGravy » Sat Mar 21, 2020

所有人的幸福,长寿和吉祥
Quarantine is when you restrict the movement of sick people.

Tyranny is when you restrict the movement of healthy people.

User avatar
agnostic
BS Supporter
Posts: 2861
Joined: Sun Jul 20, 2014
Location: PNW

Re: Chinese bots hammering BS

Postby agnostic » Sat Mar 21, 2020

這對我來說都是希臘人!
It is better to remain silent and be thought a fool, than to open your mouth and remove all doubt. ... Honest Abe


Return to “BS News!”

Who is online

Users browsing this forum: No registered users and 1 guest