Results 1 to 4 of 4
  1. #1

    apache, someone is accessing my site over and over

    I need to know how to stop this, other than just blocking IP's (as whoever is doing it will just get more)

    ...

    xxx.xxx.xxx.xxx - - [06/Sep/2006:22:15:45 -0600] "GET / HTTP/1.1" 302 235 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
    xxx.xxx.xxx.xxx - - [06/Sep/2006:22:15:52 -0600] "GET / HTTP/1.0" 302 223 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)"
    xxx.xxx.xxx.xxx- - [06/Sep/2006:22:16:03 -0600] "GET / HTTP/1.1" 302 235 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
    64.247.135.131 - - [06/Sep/2006:22:16:21 -0600] "GET / HTTP/1.1" 302 235 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
    xxx.xxx.xxx.xxx- - [06/Sep/2006:22:17:11 -0600] "GET / HTTP/1.0" 302 223 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
    xxx.xxx.xxx.xxx - - [06/Sep/2006:22:17:30 -0600] "GET / HTTP/1.1" 302 235 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
    xxx.xxx.xxx.xxx - - [06/Sep/2006:22:17:32 -0600] "GET / HTTP/1.0" 302 223 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
    xxx.xxx.xxx.xxx - - [06/Sep/2006:22:18:49 -0600] "GET /index.php HTTP/1.1" 302 235 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.2) Gecko/20040804 Netscape/7.2 (ax)"
    xxx.xxx.xxx.xxx - - [06/Sep/2006:22:20:17 -0600] "GET / HTTP/1.1" 302 235 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
    xxx.xxx.xxx.xxx - - [06/Sep/2006:22:20:33 -0600] "GET / HTTP/1.0" 302 223 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; FunWebProducts; SV1; .NET CLR 1.0.3705)"
    xxx.xxx.xxx.xxx - - [06/Sep/2006:22:20:59 -0600] "GET / HTTP/1.1" 302 235 "http://www.google.ca/search?hl=en&q=yktrader&meta=" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"
    xxx.xxx.xxx.xxx - - [06/Sep/2006:22:21:16 -0600] "GET /index.php HTTP/1.1" 302 235 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
    xxx.xxx.xxx.xxx - - [06/Sep/2006:22:21:25 -0600] "GET / HTTP/1.0" 302 223 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)"
    xxx.xxx.xxx.xxx- - [06/Sep/2006:22:21:29 -0600] "GET /index.php HTTP/1.1" 302 235 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
    xxx.xxx.xxx.xxx - - [06/Sep/2006:22:21:30 -0600] "GET /index.php HTTP/1.1" 302 235 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.2) Gecko/20040804 Netscape/7.2 (ax)"
    xxx.xxx.xxx.xxx - - [06/Sep/2006:22:21:41 -0600] "GET /index.php HTTP/1.1" 302 235 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
    xxx.xxx.xxx.xxx - - [06/Sep/2006:22:22:24 -0600] "GET / HTTP/1.1" 302 235 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
    xxx.xxx.xxx.xxx - - [06/Sep/2006:22:22:46 -0600] "GET / HTTP/1.1" 302 235 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
    xxx.xxx.xxx.xxx - - [06/Sep/2006:22:23:28 -0600] "GET /index.php HTTP/1.1" 302 235 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
    ...

    These IP's also go on to open various pages over and over incredibly fast, which brings my server down. (NOTE: there's probably atleast a dozen IP's all doing it, from various class C's)

    Any idea?

  2. #2
    Join Date
    Apr 2004
    Location
    San Jose
    Posts
    902
    Your log entries show 302 results, which are temporary redirects. It's your configuration that's causing this. The poor users' browsers are being ordered to redirect over and over.
    Specializing in MySQL and website tuning for high traffic sites. cmwsci.com/

  3. #3
    If I turn on the website within seconds i've got an army of people all trying to access various files over and over again... (the same ips as from hours ago)

  4. #4
    Join Date
    Apr 2004
    Location
    San Jose
    Posts
    902
    Just curious, what's the site? Do you have any idea why the redirects are happening? You should see 200 results, not 302s if things are acting normally.
    Specializing in MySQL and website tuning for high traffic sites. cmwsci.com/

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •