Simple web site:
www.oldWithoutMoney.com
Implemented WordPress a little while ago via cPanel's Fantastico widget -- vanilla implementation.
Just about every day, I get spam comments in the blog's Inbox for moderation.
Was wondering if folks had general tips on how to prevent or minimize this sort of nuisance and make the blog less bot-accessible, and/or where I might read up on ways to do so.
I took the 1st one this morning and the 2nd one few hours later. It was filling up my vpss numtcpsock, which slowed down my vps dramtically. Any tips or suggestions? Is there a way to lower the number of numtcpsocks
early morning
Quote:
CLOSE_WAIT
tcp 886 0 74.208.69.213:80 124.43.222.202:2701 CLOSE_WAIT
tcp 886 0 74.208.69.213:80 124.43.222.202:2702 CLOSE_WAIT
tcp 893 0 74.208.69.213:80 124.43.222.202:2703 ESTABLISHED
tcp 0 11950 74.208.69.213:80 58.62.96.22:11072 CLOSE_WAIT
tcp 886 0 74.208.69.213:80 124.43.222.202:2696 CLOSE_WAIT
tcp 0 11950 74.208.69.213:80 58.62.96.22:11073 CLOSE_WAIT
tcp 886 0 74.208.69.213:80 124.43.222.202:2697 CLOSE_WAIT
tcp 292 0 74.208.69.213:80 74.6.72.244:47500 ESTABLISHED
tcp 894 0 74.208.69.213:80 124.43.222.202:2698 CLOSE_WAIT
tcp 892 0 74.208.69.213:80 124.43.222.202:2699 CLOSE_WAIT
tcp 853 0 74.208.69.213:80 87.52.47.152:4663 ESTABLISHED
tcp 393 0 74.208.69.213:80 58.62.96.22:11084 CLOSE_WAIT
tcp 0 0 74.208.69.213:80 85.160.18.247:1598 FIN_WAIT2
tcp 0 11950 74.208.69.213:80 58.62.96.22:11020 LAST_ACK
tcp 0 11855 74.208.69.213:80 222.170.151.73:32432 FIN_WAIT1
tcp 394 0 74.208.69.213:80 58.62.96.22:11085 CLOSE_WAIT
tcp 953 0 74.208.69.213:80 84.144.97.34:61014 ESTABLISHED
tcp 0 52 74.208.69.213:22 74.103.175.48:63101 ESTABLISHED
tcp 951 0 74.208.69.213:80 84.144.97.34:61013 ESTABLISHED
tcp 0 0 74.208.69.213:80 213.6.220.1:46493 TIME_WAIT
tcp 0 11951 74.208.69.213:80 58.62.96.22:11022 LAST_ACK
tcp 0 11978 74.208.69.213:80 124.43.222.202:2694 CLOSE_WAIT
tcp 0 11951 74.208.69.213:80 58.62.96.22:11023 LAST_ACK
tcp 0 11980 74.208.69.213:80 124.43.222.202:2695 CLOSE_WAIT
tcp 394 0 74.208.69.213:80 58.62.96.22:11080 CLOSE_WAIT
tcp 244 0 74.208.69.213:80 86.27.108.29:1643 ESTABLISHED
tcp 394 0 74.208.69.213:80 58.62.96.22:11082 CLOSE_WAIT
tcp 0 11855 74.208.69.213:80 222.170.151.73:18295 FIN_WAIT1
tcp 0 11855 74.208.69.213:80 222.170.151.73:33719 FIN_WAIT1
tcp 1179 0 74.208.69.213:80 85.160.18.247:1606 ESTABLISHED
tcp 0 11854 74.208.69.213:80 222.170.151.73:31560 ESTABLISHED
tcp 0 11950 74.208.69.213:80 58.62.96.22:10996 LAST_ACK
tcp 0 11855 74.208.69.213:80 222.170.151.73:32073 FIN_WAIT1
tcp 0 11855 74.208.69.213:80 222.170.151.73:32075
few hors later:
Quote:
tcp 0 0 74.208.69.213:80 124.43.212.78:3676 SYN_RECV
tcp 0 0 74.208.69.213:80 124.43.212.78:3696 SYN_RECV
tcp 0 0 74.208.69.213:80 124.43.212.78:3737 SYN_RECV
tcp 0 0 74.208.69.213:80 124.43.212.78:3731 SYN_RECV
tcp 0 0 74.208.69.213:80 124.43.212.78:3735 SYN_RECV
tcp 0 0 74.208.69.213:80 124.43.212.78:3723 SYN_RECV
tcp 0 0 74.208.69.213:80 217.77.17.186:1959 SYN_RECV
tcp 0 0 74.208.69.213:80 124.43.212.78:3691 SYN_RECV
tcp 0 0 74.208.69.213:80 124.43.212.78:3671 SYN_RECV
tcp 0 0 74.208.69.213:80 88.102.18.14:3628 SYN_RECV
tcp 0 0 74.208.69.213:80 124.43.212.78:3747 SYN_RECV
tcp 0 0 74.208.69.213:80 124.43.212.78:3757 SYN_RECV
tcp 0 0 74.208.69.213:80 124.43.212.78:3754 SYN_RECV
tcp 0 0 74.208.69.213:80 124.43.212.78:3761 SYN_RECV
tcp 0 0 74.208.69.213:80 201.27.210.29:2540 SYN_RECV
tcp 0 0 74.208.69.213:80 213.216.199.14:37692 SYN_RECV
tcp 0 0 74.208.69.213:80 124.43.212.78:3753 SYN_RECV
tcp 0 0 74.208.69.213:80 72.14.199.72:40365 SYN_RECV
tcp 0 0 74.208.69.213:80 88.146.161.248:19475 SYN_RECV
tcp 0 0 74.208.69.213:80 81.193.196.132:2482 SYN_RECV
tcp 0 0 74.208.69.213:80 82.229.95.240:3246 SYN_RECV
tcp 0 0 74.208.69.213:80 124.43.212.78:3743 SYN_RECV
tcp 0 0 74.208.69.213:80 124.43.212.78:3695 SYN_RECV
tcp 0 23232 74.208.69.213:80 124.43.212.78:3501 ESTABLISHED
tcp 887 0 74.208.69.213:80 124.43.212.78:3693 ESTABLISHED
tcp 897 0 74.208.69.213:80 124.43.212.78:3629 CLOSE_WAIT
tcp 0 11616 74.208.69.213:80 124.43.212.78:3500 ESTABLISHED
tcp 792 0 74.208.69.213:80 124.43.212.78:3628 CLOSE_WAIT
tcp 891 0 74.208.69.213:80 124.43.212.78:3631 CLOSE_WAIT
tcp 890 0 74.208.69.213:80 124.43.212.78:3694 ESTABLISHED
tcp 886 0 74.208.69.213:80 124.43.212.78:3630 CLOSE_WAIT
tcp 800 0 74.208.69.213:80 124.43.212.78:3625 CLOSE_WAIT
tcp 891 0 74.208.69.213:80 124.43.212.78:3624 CLOSE_WAIT
tcp 0 39204 74.208.69.213:80 124.43.212.78:3499 ESTABLISHED
tcp 895 0 74.208.69.213:80 124.43.212.78:3627 CLOSE_WAIT
tcp 0 49173 74.208.69.213:80 124.43.212.78:3562 ESTABLISHED
I would like to ask about the best system or software code used to stop bots and offline down loaders from entering website.
View 2 Replies View RelatedMost of them are from Google and Yahoo...
Server is being heavily loaded beause of this.
I guess blocking crawlers is not the most brilliant
I just received two complaints that my server (71.6.197.244) is trying to run exploits on other people's servers.
I have tried checking my access logs, but am not sure what to look for.
Is this a process, or is it an exploit through a url or a php form?
I have attached the e-mail complaints as txt.
Is there any way to control the pesky Yahoo bots?
Bots with an IP of 74.6.*.* are endlessly crawling my forums, never seeming to be able to finish their task and using up huge amounts of bandwidth. Ideally I would like to be able to turn them away at the gate but allow others to view the site.
If I block the IP via the control panel they still visit presumably just getting error pages but still using up lots of bandwidth.
Looking trough my logs I found something that bothers me, there are bots who keep doing requests on my website with pages like /admin or /secure to find vulnerabilities.
It's making about 5-6 requests for unexisting pages every second until it comes to the end of it's dictionary (the pages are even sorted in alphabetical order,
Is there some way to let my Apache server block access to these bots when they make X attemps to see a page who does not exists in a short amount of time? A bit like iptables reject connection if someone tries to log in but fails to do so too many times.
I have a dedicated RHEL server with cPanel and my server loads spikes about +0.4 (out of 2.0) for about 30 mins every 4-6 hours or so. My regular server load is 0.01, because there is barely any traffic on the server yet, but by looking at my top processes in WHM, I can see that the processes that are spiking the Server Load when it is high, is something like:
sshd: [priv] root
sshd: [priv] root
sshd: [priv] root
sshd: [accepted]
sshd: [priv] games
sshd: [priv] news
sshd: [priv] root
sshd: [priv] root
sshd: [accepted]
...something along these lines. And a lot of times there are 10-20 of these sshd processes at one time.
My server is managed and my dedicated server engineer said it was probably a bot trying passwords. He took one of the IP's, said it was from Taiwan, and blocked that IP in iptables.
However, this is still happening constantly with different IP's. Is there a way to prevent this from happening? I'm the only person (and my host) who should be able to login to my server using SSH... however, I don't have a static IP and I work from multiple locations, so only allowing certain IP's won't work for me.
First off, is this normal? Or am I being attacked or what? What can I do to remedy this? It seems the bots haven't successfully logged in, but they are spiking my server load which is NOT what I want.
I am having a problem with blocking bots using .htaccess. I think I tried all possible syntax variants, yet all the bots that I am blocking get HTTP 200 response instead of 403 (I can verify it using access log).
I am using Apache 2.4 running on Ubuntu 14.04.2 with Plesk 12.0.18.
My AllowOverride is set to allow the use of .htaccess files, so .htaccess file gets loaded: when I make an error in .htaccess sysntax I can see the error in the error log and the webpages don't load. Besides, I have some "Deny from [IP address]" directives in the .htaccess and I see that these IPs get HTTP 403 response when access my site.
I spent hours trying different variants of .htaccess syntax (see below) and neither seems to work...
variant 0:
SetEnvIfNoCase User-Agent LivelapBot bad_bot
SetEnvIfNoCase User-Agent TurnitinBot bad_bot
Order allow,deny
Allow from all
Deny from env=bad_bot
[Code] ....
If I know the IP range that I want to block the best option is to block it with IPTABLES. This works well when you want to block entire countries. But what happens when you want to block specific IPs rather than ranges? Is iptables still more effective than "deny from [IP]" in .htaccess? I read that you don't want iptables to grow too big as it slows performance, but I guess it is still more effective than having big .htaccess..?
When it comes to blocking spam bots or referrers, robots.txt is just a suggestion for bots, when I looked at my traffic logs I noticed that most bots don't even look at robots.txt file. As far as I understand the only option here is to use .htaccess
1. I am currently using this in my .htaccess:
SetEnvIfNoCase User-Agent *ahrefsbot* bad_bot=yes
SetEnvIfNoCase Referer fbdownloader.com spammer=yes
...
SetEnvIfNoCase Referer social-buttons.com spammer=yes
Order allow,deny
Allow from all
Deny from env=spammer
Deny from env=bad_bot
2. Apparently, there is another approach as per below:
# Deny domain access to spammers
RewriteEngine on
RewriteBase /
RewriteCond %{HTTP_USER_AGENT} queryseeker [OR]
RewriteCond %{HTTP_REFERER} ^(www.)?.*(-|.)?adult(-|.).*$ [OR]
...
RewriteCond %{HTTP_REFERER} ^(www.)?.*(-|.)?sex(-|.).*$
RewriteRule .* - [F,L]
Which approach is better #1 or #2? Any better alternative?
Finally, somebody suggested that you need to have both (as per example below). Is it true?
RewriteEngine On
RewriteCond %{HTTP_USER_AGENT} ^rogerbot [OR]
RewriteCond %{HTTP_USER_AGENT} ^exabot [OR]
RewriteCond %{HTTP_USER_AGENT} ^MJ12bot [OR]
[Code] ....
One of my wordpress blogs got hacked and my site is redirecting to a different site.... When I check the phpmyadmin, there is another sql server that I am not familiar with... and there are around 17 table... I cannot delete the tables... I already contacted my host and still waiting for response...
The installed database is "information_schema (17)"
Are you familiar with this?
I recently had issues with HostGator and left them and now I am with MediaTemple... They are absolute crap. My site goes down with "sql errors" every day and it is pathetic.
What is the most cost effective host with the best speed and uptime for my blog?
I am an asp.net developer and want to host my blog. Which hosting provider will be ideal for asp.net blog? I have also seen that some of hosting providers provide blog hosting for blogengin.net or dasblog, should I go for them or should I go for the blog engine that I have built my self?
View 8 Replies View RelatedI'm thinking about puttin up my first blog/site on news since I check news through the whole day anyways so it would be easy for me to manage as my first site. I was wondering how much bandwidth i need? I have a Hostgator "Baby" account [url]and was wondering if this is enough? Eventually I wanna add more sites and I'm worried about the space/bandwidth .. is it hard moving site from 1 server to another? From what I've seen there is a folder for the websites in the ftp but I know that hostgator does the wordpress installing so I'm not sure if I just copy the folder and move it to a bigger server will it save the site/plugins/etc.. the way it was as if it was on hostgator.. hope that makes sense also, usually how long is it to move a site from one server to another?
View 8 Replies View Relatedto migrate a friends Blog from a pre-hosted service to his own domain and hosting. A domain is no problem for me to get but hosting seems to have changed a bit since I last purchased it all myself. Looks like all the old hosting companies I used to use have disappeared, and many are offering monster deals that I really don't need for a Blog.
What I'm looking for is something cheap and simple. It's a British Blog but I would prefer American hosting just due to the cheaper conversion rates. I have no real preferences, just enough to host a Blog and a few images. What I would like is a host that is easy to upgrade should the Blog grow and need more for it.
I am in the process of having a blog developed the following capabilities:
1. Google sitemap - will be generated and pings google after every post you make
2. Will make the links of the blog to be static links with permalinks.
3. Will add social bookmarking facility to posts( possibility to add to delicious, ****, furl, etc)
4. 'Email this post' feature
5. 'Print this post' feature
6. Show how many times a post has been viewed
7. Will install Google adsense plugin, if required.
8. Show 'Recently posted' posts in sidebar
9. Add RSS feeds to blog [Bloglines, Add to Google, My Yahoo, My MSN, Newsgator, etc]
10. Will set up the blog to ping important services when you write a post
11. Change header and color scheme to match your current site 12. Install plugin to automatically hyperlink URL's
13. Install contact form plugin for drop-in form in any new/existing post/page.
14. Install external links plugin that adds a class="external" to all outbound links.
15. Will install Google Analytics Plugin For WordPress
16. Install plugin that shows Next/Previous Post in same Category
17. Site unavailable plugin - useful when you want to make your site unavailable for maintenance.
18. Install wordpress database backup plugin
19. Wysiwyg Editor plugin - provides a much better editor than the one that comes with wordpress
20. Will install Title tag optimization plugin so that you can specify customized title for each post.
21. Will install Meta tags optimization plugin to enable you to specify customized META DESCRIPTION, META KEYWORDS AND OTHER META TAGS FOR each post.
registering the domain with the host or should this be done elsewhere? If it shoudl be doen elsewhere where should it be done?
im using blogge! where can i find cheap hosting services?
View 6 Replies View RelatedI'm currently on a 256mb RAM VPS plan with CPanel included at GoDaddy and hosting a wordpress blog which gets around 3000 uniques a day. My blog won't even last a day before the server crashes.
Now I've turned almost all plugins and turned off mail services and optimised MYSQL and HTTPD according to some articles on this forum, so I'll see how it turns out tomorrow. But I've still got a lot of functionality I want to add to the site.
It seems to be that this basic VPS plan is inadequate for my demands. Would anyone agree with this? (I got one opinion from another forum, saying it's definitely inadequate)
What specs would I need to host a blog that gets 20k uniques a day?
View 17 Replies View RelatedI'm going to be setting up and hosting a high-profile wordpress blog. It'll probably get around 800.000 pagehits per month. The client has been asking about Peak Capacity, Throughput and whatnot and I'm honestly am not sure what to tell him.
So far I've been maintaining a 1and1 windows 2003 dedicated server with about 20 websites, but none which comes close to that amount of traffic.
My plan is to go for a Linux box with the following specs:
CPU: Opteron 1218 HE
CPU Details: 2 x 2.6 GHz
RAM:4 GB RAM
Hard Disks: 2 x 400 GB (RAID 1 Software)
Bandwidth: 100Mbps
1. which web hosting provider is good for starting web hoster like me?
2. i need web host who support wordpress as blog software and web hosting must be fair price and my blog contain only 10mb size and bandwidth may 1gb/month intial.
2. can i use more than one blog in same domain, if ok in that each blog can have their own wordpress blog software i.e i can instal more than one wordprss software in same domain and web host?
3. if i accept free domain register from my web hoster, then if i transfer my blog after 5 months or 9 months to different web host provider can i use same domain or it is not possible?
a while back I left some handmade comments in some computer related blogs
not even close to spam but I put the keyword into the name field
then....a few days later I found a .txt file named blogspam on my hosting account.. anybody had a similar experience...
I am hosting my wordpress blog on a web hosting that is not that reliable as it go down once in a while for few hours without any prior notification of sheduled maintenance.
However, i have a question. How do i migrate a wordpress blog with everything intact.. data, information, application, plugins, graphics and domain name?
Currently I am hosted with Aquarius Storage, who are a fantastic company and I will be posting a review of them soon, but however that is not my point. Due to the recent tragedy of the HyperVM creator committing suicide, I will have to pay more because AQ is switching to Virtuozzo. Because I simply run a somewhat large, growing blog, paying 36$ per month is kind of outrageous.
To make things short, I need a good host, that was superb uptime, and is optimized for a WordPress blog that gets around ~5k uniques, ~30k pagehits, ~100k spider hits per month. (all figures are growing, of course), and for the site to be optimized to be speedy fast.
Well it occured to me just now that I think this might be a challenge: do you know any absolutely unbiased web hosting blog?
Without a doubt WHT is a truly unbiased discussion forum for the web hosting industry. However when it comes to blog and the luring big affiliate bucks more and more hosting companies are offering, I doubt there would be ANY truly unbiased 3rd party blogs / info sites on hosting industry.
I am hosting a Wordpress blog that currently uses 30GB of bandwidth per month. I want to introduce a forum as well so will probably need 50GB per month for now. But would like it expandable to 100GB in the future.
My requirements are:
No hidden CPU Limitations/No unreasonable resource usage restrictions.
Equipped to handle large surges of traffic.
No Overselling, able to use full allocation.
AND PROBABLY:
LiteSpeed - Does it really make a difference?
I have looked at MediaLayer, but they only provide upto 50GB transfer.
SecureServerTech looks good but uptime is only around 99%
At the moment Steadfast Networks looks the best.
My budget will be $20 for 50GB tranfer and $40 for 100GB of transfer, but this is not fixed and I would prefer quality over price.
Control panel does not mater but uptime does.
a Shared hosting should be enough for my wordpress blog site? It gets about 300 to 1000 hits per day.
Right now it's currently hosted on my loaded dedicated server and it's running very slow. Do you guys think I should order a shared hosting just for this blog alone?
If you've ever wanted to know how to build your own DC, the nice chaps at Pipe Networks in Australia have been blogging about their experiences building their own.
Quote:
The facilities staff at Pipe Networks is live-blogging its bid to build a new data center in just 60 days. The effort began back on April 16 with an empty room in Brisbane, Australia, and is entering the stretch run with a completion deadline of 9 am EST Friday (June 15). Pipe Networks has put the entire effort online, providing a window into the data center fit-out process with daily updates via Pipe Networks' DC3 blog, a live webcam of the data center in progress and a checklist of key items and their stage of completion.
(currently slashdotted, try again later)
I installed Wordpress on a local install of Apache so that I can play around with it and get my design down before I put it on the web. I can get to the admin and do everything, but I can't actually get to the site. I had an index.html in my htdocs directory, which was deleted, but now when I go to localhost, it just shows the directory.
View 2 Replies View RelatedI am looking for a cheap host that will allow adult orientated discussions and advertising. There wont be any actual porn on the site or at least not hosted on the account.
I was looking at a small orange and it looks like they allow light adult material but I was wondering if anyone had any suggestions.
Can you recommend here some reliable shared host that allow Adult WordPress blog , no movies or images will be hosted at all , it will contain only linking to rapidshare links.
View 10 Replies View Related