SitePoint Sponsor

User Tag List

Results 1 to 4 of 4
  1. #1
    Git-R-Done
    Join Date
    Nov 2001
    Posts
    1,194
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)

    How to block all these requests for phpbb searches

    Something has been hitting my site a lot lately and keeps clogging up my error logs with searches for I guess vulnerable versions of phpBB. Can someone tell me the easiest way to block all of these requests? I also don't recognize the robots Baiduspider+ and PulpFiction so I'm wondering if these are what's doing the searching and if it may just be easiest to block them. Here's what I have in my logs and this is only about 1/4 of the searches:

    /bbs/index.php
    /phpBB/index.php
    /phpbb/index.php
    /msgboard/index.php
    /portal/index.php
    /newboard/index.php
    /ugboards/index.php
    /bulletinboard/index.php
    /foros/index.php
    /Forum/index.php
    John Saunders

  2. #2
    Certified Ethical Hacker silver trophybronze trophy dklynn's Avatar
    Join Date
    Feb 2002
    Location
    Auckland
    Posts
    14,653
    Mentioned
    19 Post(s)
    Tagged
    3 Thread(s)
    John,

    Since someone's looking for something that's not there, you can either mod-rewrite the request to Fail OR obtain and block the user agent (the robots) or user's IP (which will do no good if they're working from a dial-up connection).

    Personally, I'd go with the second option and ban those user agents from my site(s) with something like this in your root .htaccess (NOT tested):
    Code:
    RewriteEngine On
    RewriteCond %{HTTP_USER_AGENT} (Baiduspider|PulpFiction)
    RewriteRule .* - [F]
    That SHOULD effectively ban those two user agents from your site.

    Regards,

    DK
    David K. Lynn - Data Koncepts is a long-time WebHostingBuzz (US/UK)
    Client and (unpaid) WHB Ambassador
    mod_rewrite Tutorial Article (setup, config, test & write
    mod_rewrite regex w/sample code) and Code Generator

  3. #3
    Git-R-Done
    Join Date
    Nov 2001
    Posts
    1,194
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Thanks! Does anybody know what the spider PulpFiction is? I cannot find anything about this.
    John Saunders

  4. #4
    Certified Ethical Hacker silver trophybronze trophy dklynn's Avatar
    Join Date
    Feb 2002
    Location
    Auckland
    Posts
    14,653
    Mentioned
    19 Post(s)
    Tagged
    3 Thread(s)
    John,

    I suspect that "bad spiders" will be designed to mascarade as other spiders or even common browsers so I doubt that my code above will be very effective. At least it should make the one(s) causing problems for you go to greater lengths just to annoy you .

    Sorry, I don't know what PulpFiction is or does but their use of it would make one believe that it's up to no good (and Google was no help).

    Regards,

    Dk
    David K. Lynn - Data Koncepts is a long-time WebHostingBuzz (US/UK)
    Client and (unpaid) WHB Ambassador
    mod_rewrite Tutorial Article (setup, config, test & write
    mod_rewrite regex w/sample code) and Code Generator


Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •