peter motte hacked this forum?

[Jeff Blakeney]

Just checked my profile and I see my karma is at -5.  This will make my 14th post to the forums so I'm thinking that I couldn't have annoyed people that much.    I'm not worried about it if this value is nothing but a display value.  If it affects being able to download stuff, then I'd be a little concerned.

[José Roca]

Don't worry, it's just a display value, but can give bad impression to other users. I have put the smites to 0.

[Peter Motte]

A quick and anonymous way of showing appreciation of reprobation for what someone has posted. Users can click "applaud" or "smite".

So, I hurt anyone. I don't know which my post was bad, so if anyone want to tell me anyone then im here...

[Frederick J. Harris]

I don't think you can smite yourself, because I tried.  Remember several months back someone found one of my tutorials useful concerning inter-operating between C and PowerBASIC.  However, I had inadvertently forgotten the __cdecl calling convention on something.  Now, I know better, but just missed it.  Edwin spotted the error.  I felt bad about it and felt that I deserved to be smitted, or should I say smote?  Not sure of the English.  Anyway, I tried to give myself the smite I felt I deserved, but nothing happened.  So I decided to give Edwin an applaud for catching my error.

It sounds to me like the person who has caused all this grief is quite adolescent.  It looks to me like Jose and Theo have suffered greatly from this.  It is clear that there is evil in this world of ours.

[José Roca]

He is still trying to access random pages each 5 minutes. Must be using an automated script.

Guest
IP address 66.249.66.203 
Today at 08:56:27 PM
e0d0abcf0325dcf309b5d7723512c2ae
http://www.jose.it-berater.org/smfforum/index.php?topic=1874.0;prev_next=next

[Brad Byrne]

unless something has recently changed... a hacker can spoof the IP address ... the calling IP is sent by the calling program

[Brad Byrne]

Jose, I've got a good connection here right now... do you need any help backing any of the site up ? ... if so .. which forums ?...

[José Roca]

I'm having also a good connection now. I have just made a backup of the entire database without problems. It is an intermitent problem. Sometimes it goes very fast and others very slow.

[Brad Byrne]

 

[Peter Motte]

He is still trying to access random pages each 5 minutes. Must be using an automated script.

Guest
IP address 66.249.66.203 
Today at 08:56:27 PM
e0d0abcf0325dcf309b5d7723512c2ae
http://www.jose.it-berater.org/smfforum/index.php?topic=1874.0;prev_next=next

But at least this is not my ip address And one page per 5 minutes is not a fast DOS attack, that the site can't deal... But it's still annoying

[José Roca]

All that he is getting is this message: "Sorry Guest, you are banned from using this forum!".

[Brad Byrne]

SMF is php right ?

I've never tried this but why not just block the IP .. so it reduces sever time... ie

Code Select Expand

<?php
$deny = array("111.111.111", "222.222.222", "333.333.333");
if (in_array ($_SERVER['REMOTE_ADDR'], $deny)) {
   header("location: http://www.google.com/");
   exit();
} ?>

and,  instead of using google for redirect use his IP...

see,  http://perishablepress.com/press/2007/07/03/how-to-block-ip-addresses-with-php/

[Cho Sing Kum]

He is still trying to access random pages each 5 minutes. Must be using an automated script.

Guest
IP address 66.249.66.203 
Today at 08:56:27 PM
e0d0abcf0325dcf309b5d7723512c2ae
http://www.jose.it-berater.org/smfforum/index.php?topic=1874.0;prev_next=next

You can use this website to check who owns the IP address:

http://www.dslreports.com/whois

IP address 66.249.66.203  belongs to Google. Maybe this one is their Googlebot crawling and indexing your forum pages for their search engine? Reason why they doing it each 5 minutes? 5 minutes between bot crawl is good Internet manners.

http://support.google.com/webmasters/bin/answer.py?hl=en&answer=70897

The hackers are the impatient ones. You see them rapid firing their chunks of  requests.

[Cho Sing Kum]

All that he is getting is this message: "Sorry Guest, you are banned from using this forum!".

Quickly remove this.

When your forum has gone through a big change, whatever change it may be (web-hosting, new version, new IP address, new URL path, etc.), Googlebot will detect and re-crawl and re-index and re-update to their engine.

You can also expect search bots from other search providers.

[José Roca]

Yes, that particular one seems a Google spider. I have removed the ban. Thanks.