Site Getting Lagged By Attackers What Setting To Use

Regular Joined: Nov 09, 2003 Posts: 73

Alright i switch over to Ravens Distro man.. Things seem to be good as started bringing over my old site modules and stuff...

Well the last couple of days man the site just started lagging big time... i mean big time!!!!!! i was like what the hell 8 days of straight work and what going on.. Anyways i notice my Visitor counter in the login block is going through the roof as it keeps growing

People Online:
Members: 245
Visitors: 1145

i was like what the hell.. anyways i start getting a lot of complaints on the forum and messages that the site it just lagging out big time.........

i am no security guy so what should i do...

i mean what is good default settings that i should i use in the Nuke Sentinel???

so i disabled the site in Sentinel and the site run fast as ever... and i checked my CPANEL error log

and i noticed this crap as XXX out my path so i am being attack i added this to the ban list.... i dont have sentinel setup to ban ip at the moment but is that what i should do and which ones..

[Fri May 19 12:06:00 2006] [error] [client 209.237.238.233] File does not exist: /xxxx/xxxxxxxxx/public_html/emailsforyou.php
[Fri May 19 12:06:00 2006] [error] [client 209.237.238.233] File does not exist: /xxxx/xxxxxxxxx/public_html/emailsforyou.php
[Fri May 19 12:05:41 2006] [error] [client 209.237.238.233] File does not exist: /xxxx/xxxxxxxxx/public_html/emailsforyou.php
[Fri May 19 12:05:41 2006] [error] [client 209.237.238.233] File does not exist: /xxxx/xxxxxxxxx/public_html/emailsforyou.php
[Fri May 19 12:05:25 2006] [error] [client 209.237.238.233] File does not exist: /xxxx/xxxxxxxxx/public_html/emailsforyou.php
[Fri May 19 12:05:25 2006] [error] [client 209.237.238.233] File does not exist: /xxxx/xxxxxxxxx/public_html/emailsforyou.php
[Fri May 19 12:05:08 2006] [error] [client 209.237.238.233] File does not exist: /xxxx/xxxxxxxxx/public_html/emailsforyou.php
[Fri May 19 12:05:08 2006] [error] [client 209.237.238.233] File does not exist: /xxxx/xxxxxxxxx/public_html/emailsforyou.php
[Fri May 19 12:04:57 2006] [error] [client 209.237.238.233] File does not exist: /xxxx/xxxxxxxxx/public_html/emailsforyou.php
[Fri May 19 12:04:57 2006] [error] [client 209.237.238.233] File does not exist: /xxxx/xxxxxxxxx/public_html/emailsforyou.php

really i need help on how to handle this!!!!!!!!!!!!!!! pleaseeeeeeeeee help... on how to handle this....

so what settings should i set and put on the permanent ban.... i was worried to do this permanent as i just have blocking on... because i charge for subscription to videos and didnt want to ban regular users...

but at this point i need to really tighten security and kill these people nuking be or DDOS or whatever the s**t they are doing...

Posted: Fri May 19, 2006 1:43 pm

i banned the ip above and connections already went down for VISITORS but still high... is there a way to check connections through the shell or something... the cpanel thing only shows last 300 errors in log..

Posted: Fri May 19, 2006 1:43 pm

block that ip...too bad the flooder dont work on sentinel...that would be ur best bet.

Posted: Fri May 19, 2006 1:59 pm

so the FLOODER is useless your saying then.. it does not work??

man help what else to do!!!!!!!!!! Crying or Very sad

i am turning on ban permanent on many of the setttings now..

Posted: Fri May 19, 2006 5:43 pm

actually NukeSentinel itself was the problem as i started a new post.. The other idiot banging on my server didnt help either..

Here is the new post about Sentinel lagging down the site... Maybe it cant handle all my Registered Members logged in large numbers i dont know??

http://www.ravenphpscripts.com/postt9715.html

Posted: Fri May 19, 2006 5:59 pm

i havent neither the skill nor the experise to answer that particular question but i dont see it happening to where sentinel cant handle the amount of members logged in...now the thing i can see happening is that the server...with so much juice might be runnin on a windows operating system which simply eats up sooo many d*** resources that the mysql may not be getting the resources it needs to follow the mass amounts of sql queries that sentinel is giving it.

thats the thing about running nuke period..the main thing is that it calls on the database and in doin so requires more server resources.

Posted: Fri May 19, 2006 6:37 pm

yeah.. but noISS its all Linux

thats my point is that is Sentinel Tracks users and when tracking that many users the SQL queries may just be to much

registered · Posted: Sat May 20, 2006 12:18 am

dirtbag wrote:

so the FLOODER is useless your saying then.. it does not work??

Correct! It has been removed from pl6 (from what I am told).

Posted: Sat May 20, 2006 6:44 am

Yes you are correct Montego, it has been removed. I upgraded one of my test sites to it and it was removed..... Very Happy