Claudebot attack

[timeforhelp1]

I found this which may help people...
Block Country from Visiting Website with .htaccess

[ssl]

We can never repeat enough that blocking IP addresses is useless and can be counterproductive, the solution to blocking bad bots is here in this subject: viewtopic.php?p=16006000#p16006000

[thecoalman]

Thanks.

I'm on cloudflare and my host has just "switched the under attack mode on and redirected all Chinese traffic away from the website".
Asking him to do Singapore now.

Fingers crossed!

If you are on Cloudflare go to security section, then click WAF link and then the custom rules link.

New rule link, from drop downs Country >> equals >> China. Under action you can just set it to JS Challenge but you can select block if you want. If you want to add more countries use the "OR" function.

[thecoalman]

Tried setting up CloudFlare today but CF completely breaks my board as soon as I turn it on.

I've been using for years without issues. The one thing you need to do is restore the original IP. Ideally you have root access and can install remote_ip, you can contact your host if you are on shared hosting to see if they can help you out.

Optionally there is two extensions for this but they are older and I don't know if they still work. remote_ip is better route because it works for everything, e.g. logs.

[timeforhelp1]

We can never repeat enough that blocking IP addresses is useless and can be counterproductive, the solution to blocking bad bots is here in this subject: viewtopic.php?p=16006000#p16006000

IP addresses at .htaccess is good tho yes?

[Mick]

This works well.

[[Dimetrodon]]

This definitely seems like a new one and I'm seeing many instances on my boards.

What does your .htaccess do with bad_bot?

Here's the tail end of mine that denies anything defined as bad_bot

Code: Select all

# 28-Mar-24, P_I, another one to banish
BrowserMatchNoCase "claudebot" bad_bot
Order Deny,Allow
Deny from env=bad_bot

Thank you for this, as I just had an attack by that bot tonight. This fixed it.

The Block Bad Bots HTACCESS I have on my extensions board might block it as it is, and/or you can add Claudebot to the list of blocked bots

8G is very good so I use it, but it does not block this bot. I decided to block Claudebot with a different set of lines separate from that, the same code that P_I uses, since I do not feel skilled enough to tamper with 8G itself.

[HiFiKabin]

8G is very good so I use it, but it does not block this bot. I decided to block Claudebot with a different set of lines separate from that, the same code that P_I uses, since I do not feel skilled enough to tamper with 8G itself.

You just add any bot (Claudbot included) in the same way as all of the other listed bots. eg within the

# 8G:[USER AGENT]

FIND

Code: Select all

	RewriteCond %{HTTP_USER_AGENT} (checkpriv|cheesebot|cherrypick|chinaclaw|choppy|clshttp|cmsworld|copernic|copyrightcheck|cosmos|crescent|datacha|(\b)demon(\b)|diavol|discobot|dittospyder) [NC,OR]

FIND

Code: Select all

|choppy|

AFTER ADD

Code: Select all

ClaudeBot|

SAVE UPLOAD PURGE BOARDS CACHE

(you can of course add new bots anywhere within that # 8G:[USER AGENT], but keeping them in alphabetical order makes it easy to find at a later date if you needed to )

[[Dimetrodon]]

You just add any bot (Claudbot included) in the same way as all of the other listed bots.

Will do that, Thanks!