Protect Mac Address authentication on XC (Stalker)

[tugapt]

Hi,
We've been facing multiple mac scan attacks on our xtream codes server.
We tried restricting "Allowed User-Agents", "Forced country" and"MAG STB Lock" but they don't seem to work, only allowed "Allowed IP Addresses" work, but many users use STBEmu on mobile devices with dynamic ips and this isn't a practical option.
We've developed an in-house solution to ban scanners and it works, the problem is that many websitess share the mac addresses and no scan actually takes place, making it difficult to block.

Any thoughts about this? Is there any setting that you recommend to increase security?

 

[jorgepreis]

Maybe allowed ISPs? Just a suggestions, don't really know...

 

[skysport]

Оnly paid servers are worried about this problem, are you one of them (paid server)? Fix yourself, there are many people here who enjoy this site but not the paid servers, I personally hate them

 

[tugapt]

Оnly paid servers are worried about this problem, are you one of them (paid server)? Fix yourself, there are many people here who enjoy this site but not the paid servers, I personally hate them

I honestly couldn't understand your post. We run a business with paid subscriptions on a XC server, if that's what you're referring to as "paid servers".

 

[jorgepreis]

Оnly paid servers are worried about this problem, are you one of them (paid server)? Fix yourself, there are many people here who enjoy this site but not the paid servers, I personally hate them

Why reply if you don't want to help? We are all here for different reasons...

 

[tugapt]

Maybe allowed ISPs? Just a suggestions, don't really know...

Hi thanks for your help.
I couldn't find an option on the panel to allow isps, what I can see is an option to block isps:

You need to be registered to see the hidden links

, but AFAIK this is system wide option and I'm looking for a more restricted per user option.

 

[Enzosdue]

hello, I'm on the side of the enemy, what about if the equipment is good ... there is no defense that works, by now they have targeted you, change server address and migrate your customers there, to a new address
if you move ... cyber attacks fail ... and that's the only defense you have

 

[Rexploded]

Login to the portal with a username and password! There was a portal.php modification on the forum for this.