Forum Moderators: phranque

Message Too Old, No Replies

Block bad robots

         

sunny7day

4:41 pm on Mar 1, 2010 (gmt 0)

10+ Year Member



My Qnap NAS is hosting a website which have some html and zip files.

In my router I can see there are some strange connection behavior which looks like this: a new inbound connection every second from a source to my server.

I have no idea what they are accessing, all I can tell is they used up quite alot of bandwith from my server.

So can anyone tell me what they are and how to block them?

jdMorgan

6:16 pm on Mar 1, 2010 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Your raw server access and error log files may help tell you "who they are" -- look at the user-agent names and lookup the originating IP addresses for these requests using "Whois." Also check the reverse-DNS to make sure the originating IP address isn't being spoofed (unlikely, but possible, and useful only for Denial-Of Service attacks which are usually "faster" than than what you report.)

Having identified the originators, you can block them at the firewall if they're consistent (if your router has firewall capabilities or if you have a separate one).

Jim