Hi, i havent posted here in awhile but i really need someone's help! See, lately for the past week or so I've been getting these strange error messages in my Error Log in cPanel. It's like people keep trying to access a page that doesn't exist on my site, but the hits are consecutively occuring many times in one second... err its kinda hard to explain so i'll just post a section of my log:


[Sat Jul 3 04:40:02 2004] [error] [client 195.93.32.10] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 04:40:02 2004] [error] [client 195.93.34.13] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 04:40:02 2004] [error] [client 195.93.34.9] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 04:40:01 2004] [error] [client 195.93.32.11] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 04:40:01 2004] [error] [client 195.93.34.9] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 04:39:23 2004] [error] [client 195.93.32.12] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 04:39:23 2004] [error] [client 195.93.34.12] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 04:39:23 2004] [error] [client 195.93.32.13] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 04:39:23 2004] [error] [client 195.93.34.12] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 04:39:23 2004] [error] [client 195.93.32.8] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 04:39:22 2004] [error] [client 195.93.34.7] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 04:39:22 2004] [error] [client 195.93.34.9] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 04:39:22 2004] [error] [client 195.93.34.7] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 04:39:22 2004] [error] [client 195.93.34.7] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 04:39:22 2004] [error] [client 195.93.34.7] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 04:39:21 2004] [error] [client 195.93.34.11] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 04:39:21 2004] [error] [client 195.93.34.8] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 04:39:21 2004] [error] [client 195.93.34.7] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 04:39:21 2004] [error] [client 195.93.32.13] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 04:39:21 2004] [error] [client 195.93.34.12] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 04:39:21 2004] [error] [client 195.93.32.14] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 04:39:21 2004] [error] [client 195.93.34.13] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 04:39:20 2004] [error] [client 195.93.34.12] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 04:39:20 2004] [error] [client 195.93.33.14] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 04:39:20 2004] [error] [client 195.93.32.8] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 04:39:20 2004] [error] [client 195.93.34.11] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 04:39:20 2004] [error] [client 195.93.34.9] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 04:39:19 2004] [error] [client 195.93.32.12] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 04:39:19 2004] [error] [client 195.93.34.9] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 04:39:19 2004] [error] [client 195.93.32.8] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 04:39:19 2004] [error] [client 195.93.33.14] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 04:39:18 2004] [error] [client 195.93.34.8] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 03:35:50 2004] [error] [client 195.93.34.13] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 03:35:50 2004] [error] [client 195.93.34.12] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 03:35:49 2004] [error] [client 195.93.34.11] File does not exist: /home/me/public_html/rs-classic/403.shtml
[Sat Jul 3 03:35:49 2004] [error] [client 195.93.32.8] File does not exist: /home/me/public_html/rs-classic/403.shtml


I changed my accout name to "me" because im paranoid... anyhow, i dont know what to do! This has been going on for over a week now, and suddenly my bandwidth is skyrocketing... im thinking this person is using some kind of a bot to keep accessing my page over and over... maybe a proxy but i dont know much about that.:confused:

anyhow, can someone help? ive tried blocking ip's but it's a huge range and it's not just this one IP. there's ones from russia, U.S. of A. and others... and i have no idea what to do! :(

come on guys, i really need some help! I think it's getting worse, now im getting these strange errors that a "script not found or able to stat" and theyre looking for CGI scripts like email.cgi, mailer, sender, feedback... all perl scripts. It sounds like someone is trying to find a script to send spam with.:(

I think this definitely has something to do with Proxies but i have no idea how to deal with them. I've worked so hard on my website and i dont want it all to be ruined by some loser that thinks theyre smart by using a program to crash a harmless website...:angry:

Do a ps aux. What do you see for processes?

Create a 403.shtml so it wont report its not found.

what's Ps Aux? i have no idea what that is! :(

3spades: just creating a 403 page isn't going to help. Whoever is using all those proxies is just going to keep hitting that page, using my bandwidth... and trying to access the scripts i mentioned before. Anyone have any ideas?

Java_dude, if you have root access to the server, type "ps aux" in the shell prompt and it will show you a list of the processes.

Have you tried asking your web host about this if you are not the web host?

err, my web hosting company doesn't allow shell access because of security reasons or whatever. I just asked them what's going on but i havent gotten a reply yet. :(

By the way, by looking at these logs, I hardly think this is a problem. It just looks like you might have a script with a bunch of includes which are returning 403's, and that's why there are a bunch of requests at the same time spitting our 403's.

Are you 100% sure this is eating up a lot of bandwidth?

well, im not sure about it using a lot of bandwidth, maybe im just getting more visitors now, but i only have 1 script on my entire site. That script has been on since i opened the new site up a few months back, and these errors have just started about a week ago.

It's not just these 403 errors, now im getting all these 404's saying that a certain script doesn't exist. Theres all sorts of errors for scripts like "email.cgi", "sender.pl", "feedback.pl" and a lot more. It's like this person is just checking to see if i have any of these scripts so that they can send out spam under my email. I'm not liking this. :mad: