PDA

View Full Version : i hate this ... why ppl attack my site??


koon
11-08-2001, 06:26 PM
i am getting crazy with my nocookie traffic
someone sent me 4796 hits on nocookie last
hour

koon
11-08-2001, 06:28 PM
Incoming from nocookie
Raw:110 Uniques:52 Percent:47.27

Outgoing generated by nocookie
Raw:20069 Uniques:1599 Percent:7.97

Referring URL
110 - nocookie


Most Popular Links
14718 - agallery
3629 - gallery
556 - top100
254 - divert
242 - bgallery
134 - top1002
124 - LINKGALLERY
95 - top2
61 - dialer
59 - topdialer
38 - TOPLIST
22 - CLICK
20 - nolabel
19 - dialer3
19 - top
12 - galleryGroup
8 - nodivert
6 - galleryBabe
6 - galleryHardcore
6 - galleryAmateur
6 - lineone
4 - gallery_Teens
3 - gallery_Pussy
3 - Asian
3 - galleryLesbian
3 - archive
3 - thumbs
2 - gallery_GroupSex
2 - galleryAsian
1 - galleryBlowjob


Incoming Repetitive IP's
11 - 165.247.133.200
11 - 63.50.212.254
8 - 65.29.110.27
7 - 193.113.112.107
6 - 172.190.79.173
5 - 148.233.71.219
4 - 213.224.83.3
3 - 61.202.8.196
3 - 63.208.42.9
2 - 64.12.96.9
2 - 63.208.62.131
2 - 217.9.44.228
2 - 144.134.29.158
2 - 195.197.160.12
2 - 210.154.214.60
2 - 194.6.2.151
2 - 152.163.189.69
2 - 194.230.222.42
1 - 217.120.55.195
1 - 216.97.215.223
1 - 144.138.36.137
1 - 207.215.86.145
1 - 193.250.243.77
1 - 205.188.209.71
1 - 205.188.209.72
1 - 212.21.161.66
1 - 213.14.34.183
1 - 211.100.63.4
1 - 152.163.189.101
1 - 12.72.50.126
104 - none
4 - 213.224.43.154, 213.224.83.150
1 - 165.21.193.18
1 - 212.21.160.197


Outgoing Repetitive IP's
2745 - 212.198.0.97
2678 - 62.176.123.170
589 - 217.80.96.37
569 - 202.98.82.5
297 - 212.185.232.85
274 - 67.165.206.164
272 - 213.229.144.2
253 - 202.175.31.101
248 - 61.202.8.196
248 - 217.9.44.228
247 - 202.158.50.232
208 - 218.131.104.7
164 - 172.188.218.111
121 - 32.102.109.74
121 - 213.168.105.27
112 - 210.151.191.97
100 - 24.200.183.24
86 - 62.11.18.69
80 - 62.104.218.85
79 - 216.54.152.58
74 - 195.92.67.71
71 - 202.146.253.15
71 - 24.22.243.166
71 - 199.174.6.220
66 - 213.195.0.54
65 - 217.0.15.145
64 - 172.183.49.96
64 - 208.191.24.193
64 - 211.187.79.101
63 - 217.56.79.190
15696 - none
2739 - 195.132.122.222
253 - 202.175.95.54
247 - 202.158.93.36
80 - 213.6.122.38
74 - 62.137.13.214
54 - 192.168.192.108, 217.11.132.250
42 - 194.158.125.35
34 - unknown
31 - 202.146.253.77
26 - 10.10.64.61
24 - 202.146.253.129
23 - 203.184.134.140
20 - 208.132.78.157
19 - 62.137.96.37
17 - 195.67.199.228
17 - 213.120.43.253
16 - 165.21.214.172
16 - 213.6.178.28
14 - 15.0.3.123
13 - 212.21.160.197
13 - 212.253.46.212
13 - 213.6.191.145
13 - 210.55.85.215
13 - 203.91.78.16
13 - 207.248.58.80
12 - 213.6.63.43
12 - 213.7.19.39
12 - 196.7.202.179
12 - 217.134.14.189

easy18s
11-08-2001, 10:18 PM
Maby it is because your name is koon

abshard
11-09-2001, 12:03 AM
Everyone gets those..from what i can tell they are programs that spider your site to get all the pictures..

abshard
11-09-2001, 12:05 AM
So any surfer that has software to spider a websuite will cause those hits..i have had over 2000 nocookie hits within a 2min period before

koon
11-09-2001, 12:39 AM
i know it can casue by spidering my site
but all my other site has much less no cookie traffic ..... it is way higher than my 100k site

run
11-09-2001, 02:56 AM
just look at the server logs
and do something like

cat access.log | awk '{print $5}' | sort | uniq -c | sort -r | head -20

if you see teleport or misterpix or anything like that in the output then you just have to block them using htaccess

the above code will work if your logs are space separated and user-agent field is #5

It is surprising sometimes but 2k site may get much more downloader traffic than 150k tgp

in normal situation nocookie traffic should be less than 10%