Attention, your site could be attacked too..
Posted: Sun Oct 16, 2005 1:03 am
My website has been targeted by some intruders ,they try to brut force me, or just shown suspicious behavior on multiple IP addresses or try to make huge traffic through an public download.I googled a bit and saw many sites have faced the same problems from these ip ranges ,usually these packets come from 211.136.*.* which belong to china and korea.
So I think we should take necesarry steps?
What else can we do restrict this ip blocks reaching for our sites and create huge traffic?
Here's the log
211.136.74.90 2 2 2.18 KB 15 Oct 2005 - 20:29
211.136.18.69 3 3 65.05 KB 15 Oct 2005 - 20:19
211.142.189.78 21 21 455.33 KB 15 Oct 2005 - 20:14
211.136.20.37 2 2 43.37 KB 15 Oct 2005 - 20:11
211.140.12.200 4 4 86.73 KB 15 Oct 2005 - 19:49
211.137.199.3 2 2 43.37 KB 15 Oct 2005 - 19:26
212.98.161.163 1 1 21.68 KB 15 Oct 2005 - 16:09
211.136.23.7 1 1 21.68 KB 15 Oct 2005 - 13:14
Its a bot or something keeps downloading same file from different ips, may one assume its kind of Dos attack?I found the solution to close my download area
So I think we should take necesarry steps?
What else can we do restrict this ip blocks reaching for our sites and create huge traffic?
Here's the log
211.136.74.90 2 2 2.18 KB 15 Oct 2005 - 20:29
211.136.18.69 3 3 65.05 KB 15 Oct 2005 - 20:19
211.142.189.78 21 21 455.33 KB 15 Oct 2005 - 20:14
211.136.20.37 2 2 43.37 KB 15 Oct 2005 - 20:11
211.140.12.200 4 4 86.73 KB 15 Oct 2005 - 19:49
211.137.199.3 2 2 43.37 KB 15 Oct 2005 - 19:26
212.98.161.163 1 1 21.68 KB 15 Oct 2005 - 16:09
211.136.23.7 1 1 21.68 KB 15 Oct 2005 - 13:14
Its a bot or something keeps downloading same file from different ips, may one assume its kind of Dos attack?I found the solution to close my download area