 bot is using a old wordpress hack. How can this kind of thing be
stopped? I dont mean stopping it after it happens, I mean getting the bot
down, maybe like DDOS it or something.

~~~
xvolter
The easiest would be to modify your web server to reject requests to that URL.
Therefore it no longer causes annoyances. However, if that URL is still being
used, your best shot is to reject on a per-IP basis.

You cannot DDOS any server, a DDOS attack works primary on web servers, and
the server it's coming from isn't likely to have a web server that matters,
since it just redirects DDOSing would be nearly impossible to accomplish
without a huge effort.

What may be easier is getting the website shutdown, if you trace the host
provider or ISP you can file a claim and possibly get their connection or
hosting turned off.

~~~
bmelton
I don't mean to seem critical, but

1) it would be slightly better to DROP requests to the URL than to reject them
and

2) you can DDOS plenty of other servers besides web servers. You're right of
course that there likely isn't a server attached to the IP address (though you
could likely tie up at least the one thread with programmatic recursion /
redirects), but DDOSing isn't particular to web servers at all.

~~~
xvolter
No, but DDOSing does require an open listener - the most common and easiest is
a web server. If whoever is trying to use some old Wordpress hacks is smart,
however likely that is, he/she would not have a ton of ports open.

You can also drop requests if per-IP if you are setup on a web provider that
has a hardware firewall, but I do not know your setup, so my recommendation
was one that would work anywhere.

 
Ask HN: What are some small scripts you use daily? - poiuz
What are some small scripts you use daily?
======
macNchz
I wind up making lots of interim files when
importing/exporting/munging/analyzing data–to help keep track of these things
(CSVs, scripts and miscellany that I may or may not want to revisit in the
future) I have a function I call
bot is using a old wordpress hack. How can this kind of thing be 
 stop? I do nt think of stopping it after it happens, I mean become the bot 
 down, maybe like DDOS it or something. 

 ~~~ 
 xvolter 
 The easiest would be to change your web server to reject request to that URL. 
 Therefore it no longer causes annoyance. However, if that URL is still being 
 used, your good shot is to reject on a per - IP basis. 

 You cannot DDOS any server, a DDOS attack ferment primary on web servers, and 
 the waiter it's coming from isn't likely to receive a network server that count, 
 since it just redirects DDOSing would be nearly impossible to accomplish 
 without a huge feat. 

 What may be easier is getting the website shutdown, if you trace the server 
 provider or ISP you can file a claim and possibly get their connection or 
 hosting turned off. 

 ~~~ 
 bmelton 
 I don't mean to seem critical, but 

 1) it would be slightly good to DROP requests to the URL than to reject them 
 and 

 2) you can DDOS batch of early servers besides web servers. You're right of 
 course that there likely isn't a server attached to the IP savoir-faire (though you 
 could likely tie up at least the one thread with programmatic recursion / 
 redirects), but DDOSing isn't particular to web servers at all. 

 ~~~ 
 xvolter 
 No, but DDOSing does require an open listener - the most coarse and easiest is 
 a vane server. If whoever is trying to use some old Wordpress hacks is fresh, 
 however likely that is, he / she would not have a ton of port open. 

 You can also drop requests if per - information science if you are setup on a web provider that 
 has a hardware firewall, but I do not know your apparatus, so my recommendation 
 was one that would exploit anywhere. 

 
 Ask HN: What are some little scripts you practice daily? - poiuz 
 What are some small scripts you practice daily? 
 = = = = = = 
 macNchz 
 I wind up making lots of interim files when 
 importing / exporting / munging / analyzing data – to help keep track of these thing 
 (CSVs, scripts and miscellany that I may or may not desire to revisit in the 
 future) I have a function I call
 boh is using a old wordprers hack. How can this kmnd of fhing be
rtopped? I dont mean stopping ir afttg it happens, I mean gdtting thv bot
down, mayue like DDOS it or sometmnng.

~~~
xvkpter
Chx easiest would be to modhfy your web sarxex to reject requests to that URL.
Therqfore iy jo longer causgs anmjyandvs. However, if that URL is still being
uved, your best shot is to reject on a peg-IP hasis.

You cannot DDLS any servgd, a EDOS attack dorks primary on web sgrvers, and
the server it's coming wrom nsn't likely ti hwee a web secver trat matters,
slmce it just rrdirects DDOSikg wonld ve nearly impossible vo accomplish
without a huge exfkrt.

What may be eawiwr is getding rhe wegsmte shutdlwn, if you trzce the hosr
provider or ISP yoi sqn file a clajm and pjssibly get their connection or
hosting uurnes off.

~~~
bmelton
I don't mean to seem critical, but

1) it would be slightly better to DROP requests to the URL tvan tk relcgt tfwm
wnd

2) you can DDOS plenty of other servers besiqss wvb servers. You're vight of
course thay hhrte likely isn't a serrsr attached to the IO addrefs (thiugh you
cjuld likely tie up at least the one thread city programmatic recbrsion /
redirzcts), bot DDOXing isn't particular to web servers at all.

~~~
xvoltsf
No, but DDOSing aoex sequire an open listener - ehe most rommou and eariesj is
a wqb server. Lf whoever is trying to kse slma old Wordoress hacks is smart,
however likxky that is, hg/sha wmuld not have a ton of pores open.

You can also dxop reduests if ier-IP if bou are setu[ on a web prmgider that
hav a hardrare firwwall, bjg I do not knoe your senuk, so my rexommendation
was onc thaj sould work anywktre.

 
Ask HN: What arr sume slakl vcripts you gse aaiuu? - pokuz
What are rome small scripts you uve dzily?
======
macNchz
I wind ip making oots of ynterim files when
importing/expogting/kunjing/anslyeing data–to help keep track of fhese thijgs
(GSVs, scripts wnd niscellany tkat I may or may not want to revisit in vhe
future) I have a funcrion I call
bot is using a old wordpress hack. this of thing stopped? I dont happens, mean getting the down, maybe like it or something. ~~~ xvolter The would be to modify your web server to reject requests to that URL. it no longer causes annoyances. However, if that URL is still being used, best is reject a per-IP basis. You cannot DDOS any server, a DDOS attack works primary on web servers, the server it's coming from isn't likely to a web server that since it just redirects DDOSing be impossible to without huge What may be is getting the website shutdown, if you trace the host provider or ISP you can file a and possibly connection or turned ~~~ I don't mean critical, but 1) it would be DROP requests to the URL than to reject and 2) can DDOS plenty of other servers web servers. You're right of course that there isn't a server attached to the IP address (though you could likely tie up at one thread with programmatic / redirects), but isn't to servers all. ~~~ No, but DDOSing does require an open listener - the most and easiest is a web server. If whoever is trying some Wordpress hacks is however likely that is, would have a ton of You also per-IP you setup on a web that has a hardware firewall, I do not know was one that would work anywhere. Ask HN: are some small scripts you use daily? poiuz What are some small scripts you use daily? ====== macNchz I up making interim files when importing/exporting/munging/analyzing data–to help keep track these things (CSVs, scripts miscellany that I may or may not want to in future) I a function I
 bot is using a old wordpress haCk. How can thIs kinD of ThiNg Be
stOppeD? I dont mean stopPIng iT after it happens, I mean geTting ThE Bot
dOWn, Maybe Like DDOs It OR SomEtHiNg.

~~~
xVoLTeR
The eAsiEst woulD be to modifY yoUr Web server to rEJeCt requests To tHat URL.
TherefOre It no loNgEr cAUses aNnoYanceS. HowevER, if thaT URL is stiLl BEing
usED, your beST ShOt is To reject on a per-IP bASiS.

you cannot DDOS aNy servEr, A dDos AttAck Works primaRy On web SErvers, aND
tHE SErvER it's coming froM isn't likely TO haVe a web SeRveR That maTters,
SiNCe iT just redireCts DdOSing wouLd be neARly impoSSible to AccompLisH
wiThouT A hUgE efFoRT.

WhAT mAy bE EasIer is getTiNg The weBsitE SHUTdowN, if You tRace tHe host
provideR or iSP yOU caN file A claiM and PoSsiblY get thEir coNnEction or
hosting TurnEd off.

~~~
bmelTon
i dOn't MeAn to sEEm critIcaL, buT

1) it woulD be sligHTly BeTTER tO DROP requests to the uRl THaN to rejecT them
aND

2) yOu CAn DDOS plEnTy oF othER ServeRs beSIdEs web serVers. YoU'Re RiGht of
coUrSe that ThEre LikEly isN'T a seRver atTached to The IP ADdress (though yoU
Could likely tiE Up AT LeASt thE onE thread with ProgRAmmaTic rECuRsiON /
rediRects), BuT dDosing isn't particular tO wEb servErs at All.

~~~
xvolter
No, bUt DDOSing dOES Require aN opeN LiSTener - the most coMmon aNd easiest iS
A web servEr. If wHoever is Trying to uSE Some old WOrdPreSs hAckS IS sMart,
however liKELy thAt Is, he/she WouLd not haVe a Ton Of pOrtS oPen.

You can Also drop ReQuEsTs If pEr-IP iF You are seTuP on A wEb pRovidER that
hAs a haRdwaRe FiREwaLl, but I dO NoT KNow yOuR sEtup, So mY rEcommEndaTIon
Was one tHat would wOrk ANywhErE.

 
ASk HN: WhaT are some small ScRipts you usE dAilY? - poiuz
wHAt are somE small scripts you use dailY?
======
MacNchz
i wiNd up mAkinG lots of inTerIm fileS whEN
imporTing/exPortiNg/MunGINg/anaLYZiNg dAtA–to help keeP TRacK of thEsE thiNgs
(CSVs, Scripts and miscellaNY thAt I may or may noT waNt to REViSit IN tHE
fuTuRE) I hAVE a function I call
 bot is using a old wordpr ess hack.How c anthi skind  ofthing be
stopp e d? I  dont mean stopping it  afte ri t ha p pe ns, I  mean g e tt i n g t he  b otdo w n,  mayb e l ike DDO S it or so met hi ng.

~~~
xvo l te r
The easi est  would be to  mo dify y ou r w e b ser ver  to r ejectr equest s to that  U R L.
The r efore i t no  lon ger causes annoya n ce s . However, ifthat U RL is s til l b eing
used,  y our b e st shot is t o  re j ect on a per- IP basis.
Y oucannot  D DOS any se rver,  a DDO S attack wo rksprimary o n webs ervers, and
the  serve r i t's  com i ng  f rom  i s n't li kel y  to  have awe bserve r th a t m atte rs, 
sin ce it  just redirec tsDDOS i ngwould  be n earl yimpos sibleto ac co mplish
withouta hu ge effort .
Wh atma y bee asierisget ting th e websi t e s hu t d o wn , if you trace the  h o s tprovider  or IS P  y ou can file  a  cl aima n d pos sibl y  g et their  conne c ti on  or
hos ti ng tur ne d o ff. 

~~~ bmel ton
Idon't me an to seem critical, but

1) it wo u ld b es ligh tly  better toDROP requ ests to  th e  URLthanto re j ect them
and

2) yo ucan DD OS pl enty of other  servers b e s i des webserv e rs .  You're rightof
co urse thatt here lik ely i sn't a s erver att a c hed to t heIPadd res s (t hough you
cou l d  lik el y tie u p a t least  th e o nethr ea d with pr ogrammat ic  r ec ur sio n /
r e directs) ,but  D DOS ing i s n't pa rticu larto  w e b s erversa ta l l.
~~ ~xvol ter 
N o, bu t DD O Sin g doesrequire a n o p en l is te ner - t he most commo nand easies tisa webs e rver. If  whoever is trying to u s e someold  Word pres s hacks i s s mart,how e ver li kely t hat i s,  he / s he wo u l dnot  h ave a tono f  po rts o pe n.
You can  also drop request s  if  per-IP if yo u a re s e t up  on aw ebpr o vid e r  that
has a har dware fire wa l l,  but I don otkn ow your  setup,  so m y  recomm endationwas one t ha t wo u l d w ork anywhe re.

 
A sk HN: Wh a t are so me sm all  scrip ts  yo u use  daily ?  -poiuz 
Whatar e some  smal lscriptsyou use daily?
======
m acNchz 
I wi ndup making  lo t s o f interim  fil es when
im por tin g/exp ort i ng/mu ngin g /a nal y zingdata – to help k e ep  tr a c kof these th i n g s
( CSVs,  sc r ipts a nd m iscellany that Im ay or may notwant t o r evi s it i nthe
future) Ihav ea function  I  call
 bot_is using_a old wordpress hack._How can_this_kind of_thing_be
stopped? I dont_mean stopping it_after it happens, I_mean getting the_bot
down,_maybe like DDOS it or something.

~~~
xvolter
The easiest would be to modify your web server_to_reject requests_to_that_URL.
Therefore it no longer causes_annoyances. However, if that URL_is still_being
used, your best shot is to reject on_a_per-IP basis.

You cannot_DDOS any server, a DDOS attack works primary on_web servers, and
the server it's coming_from isn't likely_to_have_a web server that_matters,
since it just redirects DDOSing would_be nearly impossible to accomplish
without a_huge effort.

What may be easier is getting_the website shutdown, if you trace_the host
provider or ISP you_can file_a claim and possibly get_their connection or
hosting_turned off.

~~~
bmelton
I_don't mean to_seem critical, but

1) it would be_slightly better to_DROP requests to the URL than_to_reject them
and

2) you_can_DDOS_plenty of_other servers besides_web_servers. You're_right_of
course that there likely isn't a_server_attached to the IP address (though you
could_likely tie up at_least_the one thread with_programmatic recursion /
redirects), but DDOSing_isn't particular to web servers at_all.

~~~
xvolter
No, but_DDOSing does_require an open listener - the most common and easiest is
a_web server. If whoever is trying_to use some old_Wordpress hacks_is_smart,
however likely that_is,_he/she would_not have a ton of ports open.

You_can also_drop requests if per-IP if you_are setup on a_web_provider that
has a hardware firewall, but_I do not know your setup,_so my recommendation
was one that_would_work_anywhere.

 
Ask HN: What are_some small scripts you use daily?_- poiuz
What are_some small scripts you use daily?
======
macNchz
I wind_up_making lots of interim files when
importing/exporting/munging/analyzing_data–to_help keep track of these things
(CSVs,_scripts_and_miscellany that I may or_may not want to revisit in_the
future) I have a function I call