News:

Want to get involved in developing SMF, then why not lend a hand on our github!

Main Menu

Forum guest count from China goes way up

Started by EL34, August 21, 2024, 08:33:25 AM

Previous topic - Next topic

EL34

Just lately when I view Who's Online at the bottom of the forum, I noticed a much larger number of guest.
When I look at the IP's I see 90% of them coming from China

Guest count has been typically less than 10

Not sure what is going on here?
For example, 105 guest on the forum and 3 members.

They can't do anything to the forum, so it is harmless I suppose.
I have good spam control for new member checks and only admin approval.

Is anyone else having this same experience on their forum?
Anyone have a clue why this just started happening?

here's an example of a IP lookup

Forum History -> EZBoard -> YABB -> SMF 1.1.19 -> SMF 2.0.19

a10

2.0.19, php 8.0.30, MariaDB 10.6.18. Mods: Contact Page, Like Posts, Responsive Curve, Search Focus Dropdown, Add Join Date to Post.
Stand with 🇺🇦

EL34

Quote from: a10 on August 21, 2024, 08:46:49 AM:O)

https://www.simplemachines.org/community/index.php?msg=4176431

Thanks, but that post is not what is happening to my forum or my private cloud server.
No one is running php scripts
Forum History -> EZBoard -> YABB -> SMF 1.1.19 -> SMF 2.0.19

Kindred

Слaва
Украинi

Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

"Loki is not evil, although he is certainly not a force for good. Loki is... complicated."

EL34

#4
I have a bunch of listings in my robots.txt file
Are there new bots I should be blocking that are not on my list below?

User-agent: Baiduspider
User-agent: Baiduspider-video
User-agent: Baiduspider-image
Disallow: /
User-agent: Bytespider
Disallow: /
User-agent: Sogou web spider
Disallow: /
User-agent: Sogou inst spider
Disallow: /
User-agent: Yandex
Disallow: /
User-agent: magpie-crawler
Disallow: /
user-agent: AhrefsBot
disallow: /
User-Agent: trendictionbot
Disallow: /
User-agent: WeSEE
Disallow: /
User-agent: proximic
Disallow: /
User-agent: CCBot
Disallow: /
User-agent: ZumBot
Disallow: /
User-agent: DotBot
Disallow: /
User-agent: Seznam
Disallow: /
User-agent: MJ12bot
Disallow: /
User-agent: WeSEE:Ads/PageBot
Disallow: /
User-agent: MojeekBot
Disallow: /
User-agent: NerdyBot
Disallow: /
User-agent: OrangeBot
Disallow: /
User-agent: spbot
Disallow: /
User-agent: Applebot
Disallow: /
Forum History -> EZBoard -> YABB -> SMF 1.1.19 -> SMF 2.0.19

Kindred

Robots.txt only works if they pay attention to it. Most AI and spam bots ignore it.

You need to block them using .htaccess  --  like the above linked list says.

Also, please use code bbc tags
Слaва
Украинi

Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

"Loki is not evil, although he is certainly not a force for good. Loki is... complicated."

a10

General comment about the htaccess deny's link above, it's dangerous to have such an overkill number of entries. Sooner or later one ends up blocking legit visitors, either by personal error or ip ranges gets moved to other countries etc.

ID'ing those chinese bots was done more as hobby then as them posing any practical threat to the forum. Just scraping bots, seemed they wanted to download anything and everything, over and over, week after week, feeding some stupid artificial intelligence stuff?

Even with daily pageviews jumping from normal around 5000 to 50.000++ there was no sign of slowdowns nor reactions from host, so no real safety reason for the htacess, just an evening of "ip-hobby" + some satisfaction in serving them 403's instead of content (not that they care).
2.0.19, php 8.0.30, MariaDB 10.6.18. Mods: Contact Page, Like Posts, Responsive Curve, Search Focus Dropdown, Add Join Date to Post.
Stand with 🇺🇦

EL34

My cloud server is a Windows server

So far, I have not seen any impact on my server.
Was mainly curious if anyone else has seen a dramatic rise in Chinese IP's

I have a way to block specific IP's using MADgui on my server
I do that once in a while when I see people abusing .php scripts
Forum History -> EZBoard -> YABB -> SMF 1.1.19 -> SMF 2.0.19

@rjen

Have seen it years ago, and found that there was no purpose allowing them on my site, so I use GEOIP in .htaccess to keep them all out..

put this in your .htaccess file ...

# Countryfilter to keep the buggers out
GeoIPEnable On     
SetEnvIf GEOIP_COUNTRY_CODE CN DenyCountry 
SetEnvIf GEOIP_COUNTRY_CODE_V6 CN DenyCountry
order allow,deny
deny from env=DenyCountry
allow from all
Running SMF 2.1 with latest TinyPortal at www.fjr-club.nl

Antechinus


a10

Quote from: @rjen on August 21, 2024, 02:54:10 PMHave seen it years ago, and found that there was no purpose allowing them on my site, so I use GEOIP in .htaccess to keep them all out..

The china bots finally disapeared here, all peaceful. Next time will definitely try that tip. Getting rid of .cn (& f.ex. .ru) with just a few lines would be great. Is it a standard htaccess code, or does it need host to have some geolookup setting enabled ?
2.0.19, php 8.0.30, MariaDB 10.6.18. Mods: Contact Page, Like Posts, Responsive Curve, Search Focus Dropdown, Add Join Date to Post.
Stand with 🇺🇦

@rjen

Geoip must be supported by your host, but I think most hosts support it by default. Just try it
Running SMF 2.1 with latest TinyPortal at www.fjr-club.nl

a10

^^^ tested geoip, 500 Internal Server Error. May chat with host someday to see if they could\would configure it to work, a very nice tool to have available.
2.0.19, php 8.0.30, MariaDB 10.6.18. Mods: Contact Page, Like Posts, Responsive Curve, Search Focus Dropdown, Add Join Date to Post.
Stand with 🇺🇦

bayonetbrant

Quote from: @rjen on August 21, 2024, 02:54:10 PMHave seen it years ago, and found that there was no purpose allowing them on my site, so I use GEOIP in .htaccess to keep them all out..

put this in your .htaccess file ...

(SNIP)

Where exactly does this get pasted into the .htaccess file ?

EL34

I am wondering now if I am getting paid for the bot scrapings?

My forum has a google banner ad at the top of every page
You can defeat it with an ad block extension in your browser.

But, am I getting credit for the bots views?

I did notice that my google ad revenue went up the last couple months.
I look and see over 100 guest sometimes with only a few members, so the bots are busy.
Looking at the IP's. they are definitely from China

Forum History -> EZBoard -> YABB -> SMF 1.1.19 -> SMF 2.0.19

Steve

My pet rock is not feeling well. I think it's stoned.

Aleksi "Lex" Kilpinen

Quote from: EL34 on September 02, 2024, 01:26:02 PMI am wondering now if I am getting paid for the bot scrapings?
This is a difficult question - You shouldn't really, but on the other hand it's not impossible that some of the bots are counted as valid users, and that some of those would end up counting towards your ad revenue. I would even go as far to say that it is likely, that a small portion of your income is actually bots.
Slava
Ukraini!
"Before you allow people access to your forum, especially in an administrative position, you must be aware that that person can seriously damage your forum. Therefore, you should only allow people that you trust, implicitly, to have such access." -Douglas

How you can help SMF

a10

Now it's Amazon :-X (+ some chinese), moving towards 100.000+ hits in a day. Have put 3.*.*.*  & 18.*.*.* temporarily in ban list, to monitor activity. Goes into htaccess if continuing.
2.0.19, php 8.0.30, MariaDB 10.6.18. Mods: Contact Page, Like Posts, Responsive Curve, Search Focus Dropdown, Add Join Date to Post.
Stand with 🇺🇦

shawnb61

Yep, everything has been in overdrive the last few days...

Mostly Chinese bots, but some of this traffic is from ISPs in Italy & the UK.

Also...  "FastPlanet" from Dallas, TX, has joined the fray, with activity identical to that of the Chinese bots.
A question worth asking is born in experience & driven by necessity. - Fripp

vbgamer45

Going to force a lot of people to move to cloudflare like soltuions.
Community Suite for SMF - Grow your forum with SMF, Gallery,Store,Classifieds,Downloads,more!

SMFHacks.com - Paid Modifications for SMF

Mods:
EzPortal - Portal System for SMF
SMF Gallery Pro
SMF Store SMF Classifieds Ad Seller Pro

Advertisement: