I'm sick and tired of them hammering our site with innumerable bots and slowing performance to a crawl. Each time I blocked a subnet, they just moved to another subnet. So now, their entire network is blocked. And performance of the site instantaneously improved.
A random sampling of IP addresses for guests seem to be from US locations. Maybe guests not getting frustrated by being blocked by the Alibaba crowd.
Last edited by klhansen; 07/20/20258:55 PM.
Kevin 1951 Chevy 3100 work truck Follow this saga in Project Journal Photos 1929 Ford pickup restored from the ground up. | 1929 Ford Special Coupe (First car) Busting rust since the mid-60's If you're smart enough to take it apart, you darn well better be smart enough to put it back together.
Here's the top ten hosts in the logs. The first number is the number of log entires followed by the IP address. 783 136.35.144.129 - this one is Google Fiber 427 107.77.214.174 - this one is AT&T 404 47.79.199.148 - The rest are all Alibaba. 404 47.79.196.111 386 47.79.214.126 381 47.79.202.152 369 47.79.192.52 367 47.79.200.159 365 47.79.207.101 359 47.79.214.232
I stayed off after this mornings dragging on and on and on. Initial page loading coming back this afternoon, sign in and everything is going at normal speed. Guest count currently showing around 185.
Can't say it enough - Your Support is Greatly Appreciated Sir!!!
~ Dan 1951 Chevy 3 window 3100 Follow this story in the DITY Gallery "My Grandpa Carl's Truck and How it Became Mine" 1966 Chevelle (Wife's Hot Rod) | 2013 Chevy Silverado (Current daily driver) US Army MSG Retired (1977-1998) | Com Fac Maint Lead Tech Retired (1998-2021)
It was so slow yesterday and this morning. But we also had some power outage last evening so it was hard to tell which was which. Except this morning. Other websites were humming along and Stovebolt was so slow, like Dan, I had to give us.
See great now. Thanks Paul.
~ Peggy M 1949 Chevrolet 3804 "Charlie" - The Stovebolt Flagship In the Gallery || In the Gallery Forum "I didn't see this one coming. I don't see much of anything coming. :-O"
Well, when I see the traffic increase by 10 times the normal amount, I know something is going on. And it always turns out to be these guys, so they're gone for good now.
Just me, but I would 2nd Gord's suggestion on Huawei. They are often just as bad as Alibaba has been. Grrrrr!!!
~ Dan 1951 Chevy 3 window 3100 Follow this story in the DITY Gallery "My Grandpa Carl's Truck and How it Became Mine" 1966 Chevelle (Wife's Hot Rod) | 2013 Chevy Silverado (Current daily driver) US Army MSG Retired (1977-1998) | Com Fac Maint Lead Tech Retired (1998-2021)
Just an FYI that this morning after signing in with only about 500 or so guests shown on line, the number quickly jumped to over 1,600. A quick check of the "guest" list shows at the moment of my screenshot below, there were 658 "guests" from ASN 45899 with IPs beginning with "14.". A further random check of guest IPs showed the following IP groups: 113, 123, 203 and 222 all coming from ASN 45899 which is listed as "ISP:Vietnam Posts and Telecommunications Group". Many more guests on the list in these other IP groups.
Things seem to be at normal speed, even with these "guests", so not sure if they are a similar issue to be concerned about like Alibaba or Huawei???
Just offering information in the hopes of keeping things running fast and smooth.
Edit Note: A random "whatsmyipaddress" IP check of 20 different "14." IPs all show as being "Blacklisted" for spam activity on 2 different spam checking lists.
Last edited by Gdads51; 07/21/20253:31 PM. Reason: add Edit Note
~ Dan 1951 Chevy 3 window 3100 Follow this story in the DITY Gallery "My Grandpa Carl's Truck and How it Became Mine" 1966 Chevelle (Wife's Hot Rod) | 2013 Chevy Silverado (Current daily driver) US Army MSG Retired (1977-1998) | Com Fac Maint Lead Tech Retired (1998-2021)
Here's today's top ten: 2503 199.47.82.20 - Turnitin LLC 2492 136.35.144.129 - Google Fiber Inc. 1295 66.249.73.5 - Google LLC (GOGL) 784 207.193.207.96 - AT&T Enterprises, LLC 650 166.166.161.132 - Verizon Business 641 66.249.73.6 - Google LLC 632 104.173.80.3 - Charter Communications Inc 609 136.36.182.189 - Google Fiber Inc. 528 67.248.197.51 - Charter Communications Inc 516 47.79.203.251 - Alibaba Cloud LLC
Note that the last one is an Alibaba address. Even though they're blocked, this one still made it to the top ten. (The logs cover several days of traffic.) As you can see, Google consumes a lot of our bandwidth, but cutting them off would be unwise. I'll have to research Turnitin. Not sure what that is. But they have a ton of entries, so they bear some scrutiny.
Turnitin is an application used in higher education to detect plagiarism and ensure original work is created while upholding integrity in academic pursuits. See Turnitinhttps://www.turnitin.com/
Unsure why Turnitin is lingering around in Stovebolt...
Well, glad to see that it's not slow all the time.
Craig
My '50 Chevy 3100 5 window, '62-235cu, 3:55 rear My truck ....... Respect The Rust If I'm not working on my truck, '65 m00stang or VW camper, I'm fishing with the wife or smoking Salmon.
If Paul blocked Alibaba, how are they still getting access?
They're not. The logs contain multiple days worth of entries. They only showed up on the second day because they exceeded almost every other IP in their accesses. Here's today's top ten. You'll notice that Alibaba is not among them.
3279 136.35.144.129 - Google Fiber Inc 2503 199.47.82.21 - Turnitin LLC 2503 199.47.82.20 - Turnitin LLC 1295 66.249.73.5 - Google LLC 1218 207.193.207.96 - AT&T Enterprises, LLC 1068 57.140.28.59 - MENLO SECURITY INC. 951 104.173.80.3 - Charter Communications Inc 925 67.248.197.51 - Charter Communications Inc 917 136.36.182.189 - Google Fiber Inc. 878 50.103.198.242 - Frontier Communications of America, Inc.
What this should tell you is that at least half of the traffic to any website on the internet comes from professional internet companies probing sites for various reasons, not from the legitimate traffic of users accessing the site. Google, should be obvious. Turnitin is a plagiarism monitoring site. Menlo Security is a web security company.
Between the professionals, the scammers, and the hackers, probably two-thirds of the traffic on the internet is not consumers. Maybe more. And our servers have to deal with all of that crap and still provide you with a decent experience, or you'll stop coming.
Maybe Turnitin thinks Deve is still hanging out here?
"It is better to be silent and be thought a fool than to speak and eliminate all doubt!" - Abraham Lincoln Cringe and wail in fear, Eloi- - - - -we Morlocks are on the hunt! There is nothing noble in being superior to your fellow man; true nobility is being superior to your former self. - Ernest Hemingway Love your enemies and drive 'em nuts!
... And our servers have to deal with all of that crap and still provide you with a decent experience, or you'll stop coming.
Indeed.
~ Peggy M 1949 Chevrolet 3804 "Charlie" - The Stovebolt Flagship In the Gallery || In the Gallery Forum "I didn't see this one coming. I don't see much of anything coming. :-O"
