Attack or scraping? - Newbie requests help with serious issue


#1

Hello everyone - I’m brand new here. I am an end-user, not a hosting provider, and a complete newbie.

With that said, for the last 2 months, I’ve had repeated “searches” coming from the same domains (listed below). It is my belief that these searches are causing page load issues and heaven knows what else - probably worse. Here’s the list:

大奖娱乐最新官网下载地址 Q8019309.com.com
大奖娱乐官网ptp99 Q8019309.com.com
大奖捕鱼送18元体验金 Q8019309.com.com
大奖娱乐提款速度快么? Q8019309.com.com
大奖老虎机有官方微博么 Q8019309.com.com
大奖GOS老虎机注册 Q8019309.com.com
趣拍娱乐MG老虎机首存 www.qpyl18.com
趣拍老虎机 www.qpyl18.com
天龙德州扑克游戏平台 Q8019309.com
大奖老虎机首存 Q8019309.com
大奖捕鱼游戏开户送彩金www.djyl18.com
大奖AG捕鱼游戏首存 Q8019309.com.com

I’ve searched for these domains and each one returns browser warnings that they contain malicious content. However, I cannot block them by domain or IP address. I think this may be because Cloudflare does not return the actual IP addresses.

Here are my questions:

1. Does anyone know anything about these sites?
2. How can I block them from accessing my site?
3. Will installation of mod_cloudflare help to identify the source?


#2

mod_cloudflare certainly helps if you want to block it at the server, but my guess is it’s coming from China. You can use the Cloudflare Firewall’s Access Rules to “Challenge” requests from China.


#3

This topic was automatically closed after 14 days. New replies are no longer allowed.