Just in case it helps anyone.
My site has been under attack since Friday, they are only attacking the forum urls, I am now at 800,000 visitors according to Cloudflare 99% from Brazil this week.
The first I knew was my site monitor triggering an error, as my ISP was resource throttling my site (thankfully).
Once I worked out it was the forum. I renamed the folder for the forum and put in a simple html page stating the forums were offline. This stopped the resource overload.
Next I moved my DNS to Cloudflare. Added a custom rule to add a unique header string, so anything hitting the server directly is rejected. I added a check for this to the top of common.php along with a check of the source country.
Once the dust had settled, I created a page to check the Cloudflare and the cloudflare country code in the header and made a list of countries to block. The page where the old forum was now uses a javascript link which allows users to the new location, I will be leaving that in place for now.
I am still fending off Brazil at Cloudflare using a rule to direct them to the google home page, as the problem is still on-going, but the site is running and the users are happy.
My site has been under attack since Friday, they are only attacking the forum urls, I am now at 800,000 visitors according to Cloudflare 99% from Brazil this week.
The first I knew was my site monitor triggering an error, as my ISP was resource throttling my site (thankfully).
Once I worked out it was the forum. I renamed the folder for the forum and put in a simple html page stating the forums were offline. This stopped the resource overload.
Next I moved my DNS to Cloudflare. Added a custom rule to add a unique header string, so anything hitting the server directly is rejected. I added a check for this to the top of common.php along with a check of the source country.
Once the dust had settled, I created a page to check the Cloudflare and the cloudflare country code in the header and made a list of countries to block. The page where the old forum was now uses a javascript link which allows users to the new location, I will be leaving that in place for now.
I am still fending off Brazil at Cloudflare using a rule to direct them to the google home page, as the problem is still on-going, but the site is running and the users are happy.
Statistics: Posted by jtaubman — Thu Feb 13, 2025 11:34 am