Log in

Argh! DOS Attack?!

« previous entry | next entry »
Jun. 9th, 2006 | 10:36 pm
mood: annoyedannoyed

I happened to check my weblogs tonight and realized the site has been under a DOS attack since yesterday sometime.  It has been eating up this month's bandwidth (almost all of it), 80%).

I banned the IP addresses that they seemed to be coming from:
The actual log entries look like this: - - [08/Jun/2006:16:36:13 -0700] "GET /fanfic/c/chri3227.txt HTTP/1.1" 200 4445 "-" "psycheclone

Doing a google on psycheclone and the above ip addresses results in some hits on various web logs, so its likely this is a known DOS Attacker.

I submitted a ticket to my web hosting provider asking about my options etc.,

I just need to keep a closer eye on things, I guess.  I am glad I caught this.

Not alot of news to update, as my Internet was out for 5 days so I didn't get my online stuff done and have been catchig up with email in the meantime. 

Link | Leave a comment | Share

Comments {1}

João Cr.

(no subject)

from: rotring
date: Jun. 16th, 2006 05:36 pm (UTC)

You can safely block more IPs at once, like:

As far as I read, there's some evidence that this might be an e-mail harvester.

Reply | Thread