go to  www.allaboutip.com   
AllAboutIP  
 
 
   Home  |  MyForum  |  FAQ  |  Archive    You are not logged in. [Login] or [Register]  
Forum Home » IP Lookup » How to get rid of being attacked?
Email To Friend  |   Set Alert To This Topic Rewarding Points Availabe: 0 (What's this) New Topic  |   Post Reply
Author Topic: How to get rid of being attacked?
Sunjay_06
member
offline   
 
posts: 2
joined: 05/16/2006
from: San Jose, CA
  posted on: 05/16/2006 02:35:10 AM    Edit  |   Quote  |   Report 
How to get rid of being attacked?
Hi,

I have a personal website hosted under a public shared hosting plan. The hosting is free but I get to pay the bandwidth if the traffic reach certain limit. Recently, from the access log of web statistics, I noticed a huge heavy traffic:

35,000 hits from 65.19.150.233 which kept attacking my login page.
63,000 hits from 65.19.150.249 and 24,000 hits from 65.19.150.222 which randomly attacking others.

I turned off my site and I turned it on later. It seemed be OK. But days after, the attacking came back again. Now I got to shut down my website altogether since I can not afford such a huge bandwidth.

What should I do to to get rid of such annoying attacking?



Thanks in advance.

Sunjay
 Profile | Reply Points Earned: 0
IpGuru
member
offline   
 
posts: 4
joined: 06/22/2006
from: Seattle, WA
  posted on: 06/22/2006 03:59:01 AM    Edit  |   Quote  |   Report 
It's due to the Omni-crawler
You are not alone. Tons of website got targeted by the Omni-crawler.

Actually, starting from the IP Lookup

http://www.allaboutip.com/ip_routing.html

and input 65.19.150.233, you will get the following info:

IP routing lookup results for 65.19.150.233 
route:      65.19.128.0/18
descr:      Hurricane Electric
            55 South Market St
            San Jose, CA
origin:     AS6939
notify:     noc-dist@he.net
mnt-by:     HE-NOC
changed:    mtindle@he.net 20040309
source:     RADB


This is the company that developed the crawler. Definitely, this crawler is not as smart as Google crawler. Instead, it was working too hard -- resulting nothing but troubles. Here is a more complete list of IPs it may use:

1x 65.19.150.218
1x 65.19.150.219
3x 65.19.150.224
1x 65.19.169.250
1x 65.19.150.226
1334x 65.19.150.245
1x 65.19.150.227
2278x 65.19.150.207
2x 65.19.150.221
8x 65.19.150.213
2x 65.19.150.223
1815x 65.19.150.214
1x 65.19.150.215
561x 65.19.169.233
3x 65.19.150.252
8x 64.71.131.113
1x 65.19.150.220
1x 65.19.169.245


 Profile | Reply Points Earned: 14
IpGuru
member
offline   
 
posts: 4
joined: 06/22/2006
from: Seattle, WA
  posted on: 06/22/2006 04:05:11 AM    Edit  |   Quote  |   Report 
How to get rid of it?
Here is how to get rid of it:

The Omni-Explorer agent is: OmniExplorer_Bot. To prevent it from crawling your site, simply put the following in your robots.txt file:

User-Agent: OmniExplorer_Bot
Disallow: /


That's it.
 Profile | Reply Points Earned: 6

 
Powered by ForumEasy © 2003-2005, All Rights Reserved. | Privacy Policy | Terms of Use
 
Get your own forum today. It's easy and free.