Attention, your site could be attacked too..

digest · Post by **digest** » Sun Oct 16, 2005 1:03 am

My website has been targeted by some intruders ,they try to brut force me, or just shown suspicious behavior on multiple IP addresses or try to make huge traffic through an public download.I googled a bit and saw many sites have faced the same problems from these ip ranges ,usually these packets come from 211.136.*.* which belong to china and korea.
So I think we should take necesarry steps?
What else can we do restrict this ip blocks reaching for our sites and create huge traffic?
Here's the log

211.136.74.90 2 2 2.18 KB 15 Oct 2005 - 20:29
211.136.18.69 3 3 65.05 KB 15 Oct 2005 - 20:19
211.142.189.78 21 21 455.33 KB 15 Oct 2005 - 20:14
211.136.20.37 2 2 43.37 KB 15 Oct 2005 - 20:11
211.140.12.200 4 4 86.73 KB 15 Oct 2005 - 19:49
211.137.199.3 2 2 43.37 KB 15 Oct 2005 - 19:26
212.98.161.163 1 1 21.68 KB 15 Oct 2005 - 16:09
211.136.23.7 1 1 21.68 KB 15 Oct 2005 - 13:14

Its a bot or something keeps downloading same file from different ips, may one assume its kind of Dos attack?I found the solution to close my download area

digest · Post by **digest** » Sun Oct 16, 2005 4:01 pm

And finally i solved my problem by editing .htacess file and making necessary changes.If anyone facing the same problems,let me know for any help .Beware of bots and these kind of attacks,check back your apache logs for suspicious behaviours..

korsaan · Post by **korsaan** » Mon Oct 17, 2005 2:25 pm

I know how to prevent my site Man
nd thank you for your help

RvB · Post by **RvB** » Fri Nov 25, 2005 7:50 pm

i shal block these ip addresses thnx man, very much apreciated.

znad · Post by **znad** » Sun Nov 27, 2005 10:09 am

thanx digest foryour help and your advice

zeroraven · Post by **zeroraven** » Thu Dec 22, 2005 2:12 am

Thanks for your advice, but remember these are just a specific few, there are many more out there...