You are viewing fkfanfic

Argh! DOS Attack?!

« previous entry | next entry »
Jun. 9th, 2006 | 10:36 pm
mood: annoyedannoyed

I happened to check my weblogs tonight and realized the site has been under a DOS attack since yesterday sometime.  It has been eating up this month's bandwidth (almost all of it), 80%).

I banned the IP addresses that they seemed to be coming from:
208.66.195.8
208.66.195.6
208.66.195.9
208.66.195.3
208.66.195.2
208.66.195.4
208.66.195.5
208.66.195.7
208.66.195.10
208.66.195.11
The actual log entries look like this:
208.66.195.9 - - [08/Jun/2006:16:36:13 -0700] "GET /fanfic/c/chri3227.txt HTTP/1.1" 200 4445 "-" "psycheclone

Doing a google on psycheclone and the above ip addresses results in some hits on various web logs, so its likely this is a known DOS Attacker.

I submitted a ticket to my web hosting provider asking about my options etc.,

I just need to keep a closer eye on things, I guess.  I am glad I caught this.

Not alot of news to update, as my Internet was out for 5 days so I didn't get my online stuff done and have been catchig up with email in the meantime. 

Link | Leave a comment | Share

Comments {1}

João Cr.

(no subject)

from: rotring
date: Jun. 16th, 2006 05:36 pm (UTC)
Link

You can safely block more IPs at once, like: 208.66.195.0/32

As far as I read, there's some evidence that this might be an e-mail harvester.

Reply | Thread