Forums

How do you stop a hacker flood? (22 posts)

  1. domains33
    Member
    Posted 3 years ago #

    Some moron wants 10$ a month or he will not stop flooding.IP address [?]: 98.206.220.172 [Whois] [Reverse IP]
    IP country code: US
    IP address country: United States
    IP address state: Illinois
    IP address city: Waukegan
    IP postcode: 60085
    IP address latitude: 42.347900
    IP address longitude: -87.867104
    ISP of this IP [?]: Comcast Cable
    Organization: Comcast Cable

  2. DustyP
    Member
    Posted 3 years ago #

    Yes, I made an observation yesterday that WordPress does not have any kind of anti-flood measure in place. A visitor can sit on your blog all day and make thousands of comments on the same blog entry.

    You can set it up so that the comments aren't displayed until you approve them, but you'll still have to go through and delete them all. I don't understand the reason for this oversight, especially when the makers of WordPress acknowledge the abuses of SPAM. But it seems you're on your own in this regard.

    You may try and look for a plugin that will block IP Addresses, but you may find yourself spending most of your time adding new IP Addresses to the blacklist. You can also disable the comment feature rather than give in to extortion, but then that might defeat the purpose of your needing or wanting a blog-in-the-box.

  3. ClaytonJames
    Member
    Posted 3 years ago #

    I suggest you do some quick reading up on the term "Extortion".

    This a quick an dirty (but interesting) synopsis courtesy of the wikipedia, but I think you will get the point. What you decide to do about it should be easy after reading this.


    "In the United States, extortion may also be committed as a federal crime across a computer system, phone, by mail or in using any instrument of "interstate commerce." Extortion requires that the individual sent the message "willingly" and "knowingly" as elements of the crime. The message only has to be sent (but does not have to reach the intended recipient) to commit the crime of extortion.

    Theft by extortion is commonly called blackmail."

  4. ashishbajaj
    Member
    Posted 3 years ago #

    Try to setup some captcha code in your comments.

    There are plugins available to block the inflow.

  5. domains33
    Member
    Posted 3 years ago #

    Hes flooding the IP of the blog... hes not flooding comments

  6. chrissweblog
    Member
    Posted 3 years ago #

    an IP blocker might be your best bet If it the same IP over and over. If you have an Apache server, an .htaccess ban will block him from the whole site. Just a suggestion.

  7. domains33
    Member
    Posted 3 years ago #

    Hes using a proxy ....

    how can you report a proxy... hes asking for 10$ a month

  8. domains33
    Member
    Posted 3 years ago #

    He said he will flood till wordpress cancels the blog..

    I have over 4million hits on this blog

  9. chrissweblog
    Member
    Posted 3 years ago #

    Then contact his ISP and tell them. They might cancel his account, extortion is Illegal.

  10. esmi
    Theme Diva & Forum Moderator
    Posted 3 years ago #

    Have you contacted your hosting provider? I'm sure they'd be very interested in any flooding threats.

  11. domains33
    Member
    Posted 3 years ago #

    I'm just admin... its not my blog.

    How would someone do this?

    link?

  12. domains33
    Member
    Posted 3 years ago #

    Its wordpress

  13. esmi
    Theme Diva & Forum Moderator
    Posted 3 years ago #

    If it's a wordpress.com blog, http://support.wordpress.com/contact/

  14. domains33
    Member
    Posted 3 years ago #

    cool thanks.... you think if he does not stop... the blog will come down?

  15. esmi
    Theme Diva & Forum Moderator
    Posted 3 years ago #

    Unlikely. Most hosting providers already take steps to guard against this kind of attack. Even so, they may want to pursue this further, so keep a copy of all logs and any mails received from this individual. It all helps to track him/her down.

  16. caalip
    Member
    Posted 3 years ago #

    If the ip addess is him, just report him to comcast. abuse@comcast.net I suspect that will take away his internet account. Also, abuse@ works for most servers. Send a message to every server between him and you. Hopefully, atleast some of the mwill block him.

  17. dacheatcodes
    Member
    Posted 3 years ago #

    Hi,

    If you have server access (ssh access), and you have firewall with iptables, run this command:

    iptables -I INPUT -D 98.206.220.172 -j DROP === BLOCK

    And if you feel you ever need to unblock that user, simply input:

    iptables -D INPUT -s 98.206.220.172 -j DROP === UNBLOCK

    You could also block him via .htaccess with the following lines:

    order allow,deny
    deny from 98.206.220.172
    allow from all

    Easiest way: iptables block. Secure, and better. They won't be able to load your site.

    Complicated way: .htaccess is a bit tricky sometimes...

  18. dacheatcodes
    Member
    Posted 3 years ago #

    If you are self hosted on a site such as Host Gator, then you need to go with .htaccess.

    If you are hosted at WordPress.com, http://wordpress.com/support/contact (:

  19. annieknox21
    Member
    Posted 2 years ago #

    wow that is some situation you are in. I also have spammers flooding the comments (not my blog too, just an admin)and it is really annoying to delete their nonsense comments. But they have not asked for any amount to stop (yet?)
    Did you solve your problem? I hate spammers...

  20. domains33
    Member
    Posted 2 years ago #

    The webmaster got involved and stopped him.

    Saw the guy again and said hes on wireless, so I guess his speed is not high enough and losings connection.

    He said he changed tho :)

  21. jynmeyer
    Member
    Posted 2 years ago #

    Watch out for the plugin IP Host Blocker though ( http://wordpress.org/extend/plugins/tz-host-blocker/ ) I installed it and it wouldnt let me view my site unless I logged in, plus it tells me I do not have permission to view my blacklist from the plugin settings so I figure Im on the list, somehow, as is everyone else. There is no contact info for the guy so, I had to disable it. :/

  22. T
    Member
    Posted 2 years ago #

    Jyn, a lot of people are using the plugin without problems and it does a pretty good/simple job blocking IP's

Topic Closed

This topic has been closed to new replies.

About this Topic

Tags

No tags yet.