70% of the bandwidth is used by 2 adjacent IPs: 194.83.245.140 194.83.245.141 Now what do I do to prevent them from abusing my proxy? Do anyone of you have proxy sites? What do you do to prevent spam requests?
Thanks. Got it sorted out by Google. But this isn't the best solution, isn't it. What if some new spam guy come in to abuse the system in future? I have to monitor my traffic stats all the time?
The IP belongs to Greenhall Education Centre They have small IP Block 194.83.245.128 - 194.83.245.143, they are probably passing all there LAN traffic to their proxy (A real proxy that is) and have the stuff filtered, then have the Outgoing traffic from this range 194.83.245.128 - 194.83.245.143, Its probably multple people behind a LAN with the same outgoing IP Most likely, it was not a abuser, It was Multiple people using your proxy. But it could be like the 10 people at this school using your proxy...Maby they told there friends about your proxy, or the teacher was telling people in there whole class to use for researching becuase the idiots blocked the important sites.. The school don't have infinite IP addresses Do not think when someone at school is using your proxy each person has a differnt IP, if you have 30 people a day at school using your proxy they all will comming from the Same IP, now if there were surfing myspace and watching Youtube, the bandwidth might hit a level that may seem at first to be abuse. How much bandwidth? Now if you saying 70% of your bandwidth is being used, that doesn't say how much bandwidth. Now if you said you use 2 TB of bandwidth and 70% of it was comming from this IP, THEN YES, I would block them. If I was like 20 GIGS a month and 70% was comming from this IP, THEN NO, thats peanuts. But its up to you decide whats the solution.
I would call it high usage, see what they are surfing.. it isn't hard... Take the encode url from apache stats and paste it into your browser, works a charm.
Thanks a lot. They just take 0.5GB/day or so, then I'll just let them and see what happens. =) Rep added.
Yes my opinion seems logical, it probably is a few people and there friends using your proxy. Do you have youtube enabled? But it really up to you to decide the solution of whether you can afford it or not by your own bandwidth limitations etc... I for example have a dedicated with unmetered 100 Mbit/s Which gives me 35 Terabytes a month of bandwidth. So I really would not care.
Be wary of spammers using your proxy to send spam via webmail services. I had to disable access to certain email services after the hosting company complained of such abuse. I just do this by adding the host in the server's /etc/hosts file in front of the "localhost" IP (127.0.0.1). Also takes care of multiple IPs for the same hostname.
Proxies are also frequently used to perform credit card fraud, since most places check to see if the IP is from the same location as the billing address on the card. So any proxy is going to be a target for abuse.