Page 1 of 1

Attention, your site could be attacked too..

Posted: Sun Oct 16, 2005 1:03 am
by digest
My website has been targeted by some intruders ,they try to brut force me, or just shown suspicious behavior on multiple IP addresses or try to make huge traffic through an public download.I googled a bit and saw many sites have faced the same problems from these ip ranges ,usually these packets come from 211.136.*.* which belong to china and korea.
So I think we should take necesarry steps?
What else can we do restrict this ip blocks reaching for our sites and create huge traffic?
Here's the log

211.136.74.90 2 2 2.18 KB 15 Oct 2005 - 20:29
211.136.18.69 3 3 65.05 KB 15 Oct 2005 - 20:19
211.142.189.78 21 21 455.33 KB 15 Oct 2005 - 20:14
211.136.20.37 2 2 43.37 KB 15 Oct 2005 - 20:11
211.140.12.200 4 4 86.73 KB 15 Oct 2005 - 19:49
211.137.199.3 2 2 43.37 KB 15 Oct 2005 - 19:26
212.98.161.163 1 1 21.68 KB 15 Oct 2005 - 16:09
211.136.23.7 1 1 21.68 KB 15 Oct 2005 - 13:14

Its a bot or something keeps downloading same file from different ips, may one assume its kind of Dos attack?I found the solution to close my download area

Posted: Sun Oct 16, 2005 4:01 pm
by digest
And finally i solved my problem by editing .htacess file and making necessary changes.If anyone facing the same problems,let me know for any help .Beware of bots and these kind of attacks,check back your apache logs for suspicious behaviours..

Posted: Mon Oct 17, 2005 2:25 pm
by korsaan
I know how to prevent my site Man
nd thank you for your help ;)

Posted: Fri Nov 25, 2005 7:50 pm
by RvB
i shal block these ip addresses thnx man, very much apreciated.

Posted: Sun Nov 27, 2005 10:09 am
by znad
thanx digest foryour help and your advice

Posted: Thu Dec 22, 2005 2:12 am
by zeroraven
Thanks for your advice, but remember these are just a specific few, there are many more out there...