What is going on? Is this some kind of widespread attack?

Get help with installation and running phpBB 3.3.x here. Please do not post bug reports, feature requests, or extension related questions here.
User avatar
SpIdErPiGgY
Registered User
Posts: 387
Joined: Sun May 02, 2021 2:11 pm
Location: Erpe-Mere, Aalst, BE
Name: Andy Dm

Re: What is going on? Is this some kind of widespread attack?

Post by SpIdErPiGgY »

Traction wrote: Wed May 07, 2025 7:02 pm I just added that to my put that in my .htaccess, and added the robots.txt to the root. So far, still 503 errors. It's been 10 minutes since I added.
Can take a while for the server to restart the service...
Image
User avatar
Traction
Registered User
Posts: 354
Joined: Fri Jun 06, 2003 8:42 pm
Location: Staten Island, New York

Re: What is going on? Is this some kind of widespread attack?

Post by Traction »

SpIdErPiGgY wrote: Wed May 07, 2025 7:07 pm
Traction wrote: Wed May 07, 2025 7:02 pm I just added that to my put that in my .htaccess, and added the robots.txt to the root. So far, still 503 errors. It's been 10 minutes since I added.
Can take a while for the server to restart the service...
In the meantime, I'm gonna do that blackhole suggestion.
Failure is not an option.
Zap! Classic Video Game Forums
User avatar
Traction
Registered User
Posts: 354
Joined: Fri Jun 06, 2003 8:42 pm
Location: Staten Island, New York

Re: What is going on? Is this some kind of widespread attack?

Post by Traction »

SpIdErPiGgY wrote: Wed May 07, 2025 7:07 pm

One question about Step 4:
Step 4: Include the Blackhole script by adding the following line to the top of your pages (e.g., header.php):
Where's header.php? Do they mean overall_header.html in the Styles directory? I'm not a noob, but they make it unclear. :)
Failure is not an option.
Zap! Classic Video Game Forums
skybound
Registered User
Posts: 222
Joined: Wed Nov 12, 2003 7:11 am
Location: Port Elizabeth - South Africa

Re: What is going on? Is this some kind of widespread attack?

Post by skybound »

Yup, looks like phpbb is also suffering. Currently 3082 guests. :o
User avatar
SpIdErPiGgY
Registered User
Posts: 387
Joined: Sun May 02, 2021 2:11 pm
Location: Erpe-Mere, Aalst, BE
Name: Andy Dm

Re: What is going on? Is this some kind of widespread attack?

Post by SpIdErPiGgY »

Traction wrote: Wed May 07, 2025 7:26 pm
SpIdErPiGgY wrote: Wed May 07, 2025 7:07 pm

One question about Step 4:
Step 4: Include the Blackhole script by adding the following line to the top of your pages (e.g., header.php):
Where's header.php? Do they mean overall_header.html in the Styles directory? I'm not a noob, but they make it unclear. :)
I added that in common.php


Find:

Code: Select all

require($phpbb_root_path . 'includes/startup.' . $phpEx);
Add above:

Code: Select all

include(realpath(getenv('DOCUMENT_ROOT')) . '/blackhole/index.php');
Image
mattash
Registered User
Posts: 162
Joined: Thu Nov 11, 2004 6:33 am

Re: What is going on? Is this some kind of widespread attack?

Post by mattash »

just use cloudflare . my site is lightning fast now
LePaul
Registered User
Posts: 74
Joined: Sat Feb 23, 2013 9:50 pm

Re: What is going on? Is this some kind of widespread attack?

Post by LePaul »

But how?

For example, I'm on a GoDaddy server so its a shared resource - unless you know a way to enter the settings?
mattash
Registered User
Posts: 162
Joined: Thu Nov 11, 2004 6:33 am

Re: What is going on? Is this some kind of widespread attack?

Post by mattash »

i use amazon AWS.
1step for me was signing up cloudflare
2step just following their directions. i went to route 53 who handles the routing of the site (prob something you will see in the go daddy c panel if they have it and changed the routing to go through cloud flare . then when in the cloudflare settings and turned on bot attack.


this is what it looks like southeasternohiopreps.com
LePaul
Registered User
Posts: 74
Joined: Sat Feb 23, 2013 9:50 pm

Re: What is going on? Is this some kind of widespread attack?

Post by LePaul »

I got through the Cloudflare setup quite easily

The many techs trying to sell me products i dont need on GoDaddy was maddening

When I go to DNS, I see i can't make any edits to CloudFlare
canteditCapture.PNG
You do not have the required permissions to view the files attached to this post.
SQLnovice
Registered User
Posts: 208
Joined: Thu Oct 10, 2019 5:03 am

Re: What is going on? Is this some kind of widespread attack?

Post by SQLnovice »

I think you're in your DNS Records tab. Try the Name Servers tab instead. There you'll be able to change the name servers to Cloudflare's name servers.
LePaul
Registered User
Posts: 74
Joined: Sat Feb 23, 2013 9:50 pm

Re: What is going on? Is this some kind of widespread attack?

Post by LePaul »

YES!

I changed it!
User avatar
dontcoz
Registered User
Posts: 519
Joined: Mon Sep 29, 2008 9:49 pm
Location: Vancouver, BC

Re: What is going on? Is this some kind of widespread attack?

Post by dontcoz »

Thank you for all the suggestions, one or all of them worked. The number of bots would go close to 7000 at times and on one of the forums over 9600. Another thing i did that seem to have helped was PHP update to 8.3. Anybody else noticed that PHP version made a diff?
User avatar
Traction
Registered User
Posts: 354
Joined: Fri Jun 06, 2003 8:42 pm
Location: Staten Island, New York

Re: What is going on? Is this some kind of widespread attack?

Post by Traction »

SpIdErPiGgY wrote: Wed May 07, 2025 7:50 pm
Traction wrote: Wed May 07, 2025 7:26 pm


One question about Step 4:



Where's header.php? Do they mean overall_header.html in the Styles directory? I'm not a noob, but they make it unclear. :)
I added that in common.php


Find:

Code: Select all

require($phpbb_root_path . 'includes/startup.' . $phpEx);
Add above:

Code: Select all

include(realpath(getenv('DOCUMENT_ROOT')) . '/blackhole/index.php');
Thank you! One last thing:
Step 5: Add a hidden link to the /blackhole/ directory in the footer of your site’s web pages (replace “Your Site Name” with the name of your site):
Which file did you edit for the footer, and where did you put this?

Code: Select all

<a rel="nofollow" style="display:none" href="https://example.com/blackhole/" title="Do NOT follow this link or you will be banned from the site!">Your Site Name</a>
Failure is not an option.
Zap! Classic Video Game Forums
User avatar
SpIdErPiGgY
Registered User
Posts: 387
Joined: Sun May 02, 2021 2:11 pm
Location: Erpe-Mere, Aalst, BE
Name: Andy Dm

Re: What is going on? Is this some kind of widespread attack?

Post by SpIdErPiGgY »

Traction wrote: Thu May 08, 2025 5:31 am Which file did you edit for the footer, and where did you put this?

Code: Select all

<a rel="nofollow" style="display:none" href="https://example.com/blackhole/" title="Do NOT follow this link or you will be banned from the site!">Your Site Name</a>
You can add it somewhere in overall_footer
Above:

Code: Select all

</body>
</html>
Image
User avatar
Traction
Registered User
Posts: 354
Joined: Fri Jun 06, 2003 8:42 pm
Location: Staten Island, New York

Re: What is going on? Is this some kind of widespread attack?

Post by Traction »

SpIdErPiGgY wrote: Thu May 08, 2025 5:39 am
You can add it somewhere in overall_footer
Above:

Code: Select all

</body>
</html>
Thank you. I'm pretty sure that I did it right, and I've refreshed everything. Site has been working well for the last several hours (since I did your .htaccess edit), so it's hard to tell if it's in effect. I guess no news is good news though, right? Only two Guests. :)
Failure is not an option.
Zap! Classic Video Game Forums

Return to “[3.3.x] Support Forum”