Results 1 to 11 of 11
  1. #1

    Forum under attack

    Hello:

    Our forum is under attack...and our host won't do anything except tell us that our load is too high and that they might turn off our account.

    But, we've already turned off the forum...the only load is a note that says it's down for maintenance...no database...no html...nothing.

    In a very short amount of time it has has over 300,000 page requests for the same three pages.

    Is there anything on my side (since I don't run the server) that I can do to stop this or prevent it...etc?

    Thanks
    Last edited by Vaskerville; 02-04-2008 at 04:42 AM.

  2. #2
    Join Date
    Oct 2004
    Location
    Kerala, India
    Posts
    4,750
    You should check with your host to monitor the connections to your domain and if it is comes from a particular range of IPs, block those range.
    David | www.cliffsupport.com
    Affordable Server Management Solutions sales AT cliffsupport DOT com
    CliffWebManager | Access WHM from iPhone and Android

  3. #3
    Join Date
    Dec 2005
    Location
    Canberra - Australia
    Posts
    108
    Also change permissions so that the public can't view the pages? Would that work?


  4. #4
    Join Date
    Oct 2004
    Location
    Kerala, India
    Posts
    4,750
    Quote Originally Posted by iXenNet View Post
    Also change permissions so that the public can't view the pages? Would that work?
    He says he has already turned off the forum.
    David | www.cliffsupport.com
    Affordable Server Management Solutions sales AT cliffsupport DOT com
    CliffWebManager | Access WHM from iPhone and Android

  5. #5
    The host, I won't mention their name yet, says there is nothing they can do. But, I will say that they host over 150,000 domains...so I'm rather stumped by their statement.

    The stats package they provide, of course, do not provide ip information. Maybe I'll write my own fast generator for this...

  6. #6
    Join Date
    Aug 2002
    Location
    Seattle
    Posts
    5,512
    Why mention their name at all? It's not necessarily their fault since few providers will offer to protect against this.

  7. #7
    So, people lose their accounts left and right over these kinds of things? It's normal for that to happen? It's not my fault either...except I have a website and get maybe 30 people a day to our little forum.

    Brutal.

  8. #8
    Join Date
    Jun 2002
    Location
    Toronto, Ontario
    Posts
    1,449
    I had a customer that had a similar issue. After reviewing his access-logs, we found several domains hammering his web site, possibly spam bots, we disabled them and that solved that.

    Ask your host for access logs.
    Kaumil P.

  9. #9
    The attack is over...it's the second one though.

    They don't provide logs. Wish they did. They are awesome in just about every way though...very happy with them for years now. But, threatening to turn everything off on me, even after I had turned off everything on my site...what the heck is a person supposed to do?

    Not have a website?

  10. #10
    Join Date
    Feb 2007
    Posts
    1,250
    Do you mean that they will not allow you access to logs? Or just that you don't know where to find them? It's hard to imagine why they would not let you see the logs.
    Need money? Got money? Want to talk? The Money Forums
    New! Web hosting jobs!

  11. #11
    is it a vbulletin forum? either way log into FTP and chmod of the files to prevent public access.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •