Forum Moderators: DixonJones

Message Too Old, No Replies

Odd activity on site

Someone grabbing my site.

         

olwen

8:00 pm on Apr 8, 2003 (gmt 0)

10+ Year Member



I was alerted this morning by receiving 1279 emails advising me of 404 errors of something odd happening on my site. I've dowloaded logs and discovered that on enquirer from 217.44.228.85 seems to have been attemptimg to download my site. Errors on the site, and poorly formed requests on their part lead to the 404s. Altogether there were 2476 requests in less than 6 minutes.

I'm hoping I've banned the address with the following in my .htaccess


order allow,deny
allow from all
deny from 217.44.228.85

or should the deny come before the allow?

217.44.228.85 seems to be part of a BT block. I'm guessing a broadband connection. Would a complaint to abuse@bt.com be in order. Is there another address I should use. I had a quick look at BT's website but it has so much stuff on it that it is hard to find an address to email about this.

pendanticist

8:11 pm on Apr 8, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



abuse@bt.net and yes. By all means send an abuse message to those folks.

Subject Header your message something like:

"Bandwidth Theft Issues from your IP Block."

<Limit GET POST>
order deny,allow
deny from 217.44.228.85
deny from blah
deny from blah
...
..
.
.

...is the way I have mine.

Pendanticist.

jdMorgan

8:19 pm on Apr 8, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



olwen,

You do need to use deny,allow. Otherwise the allow from all will override the deny.

Apache mod_access documentation [httpd.apache.org].


order deny,allow
deny from 217.44.228.85

Jim