Page 1 of 1
Restricted IP block : 159.138.0.0/16
Posted: Sat Oct 05, 2019 2:31 am
by erdem_ua
Due really high suspicious connections to forum and wiki from this IP block, I just blocked the whole ip range.
Looks like initiated from Hong Kong, China.
Re: Restricted IP block : 159.138.0.0/16
Posted: Sat Oct 05, 2019 4:34 am
by sga
Are there no others?
Re: Restricted IP block : 159.138.0.0/16
Posted: Sat Oct 05, 2019 9:46 am
by zoelechat
Still a hugely abnormal amount of guest users imho. Hope no 0-day like vBulletin forums that were nearly all hacked recently
Re: Restricted IP block : 159.138.0.0/16
Posted: Sun Oct 06, 2019 1:34 pm
by juusso
Lose nothing if temporary (if not permanently restrict access) and look what then will happen.
Re: Restricted IP block : 159.138.0.0/16
Posted: Fri Nov 01, 2019 12:52 am
by erdem_ua
I have play with mysql db cache settings and I think most of the performance problems are passed away now.
Re: Restricted IP block : 159.138.0.0/16
Posted: Fri May 22, 2020 11:58 am
by stimshardashian
erdem_ua wrote: ↑Fri Nov 01, 2019 12:52 am
I have play with mysql db cache settings and I think most of the performance problems are passed away now.
Have you done your own pen-testing using a tool like sqlmap?
Re: Restricted IP block : 159.138.0.0/16
Posted: Fri May 22, 2020 1:43 pm
by erdem_ua
Our database is not open to internet. Why do I need to do that?
Re: Restricted IP block : 159.138.0.0/16
Posted: Fri May 22, 2020 2:50 pm
by stimshardashian
erdem_ua wrote: ↑Fri May 22, 2020 1:43 pm
Our database is not open to internet. Why do I need to do that?
https://www.w3schools.com/sql/sql_injection.asp