Need help dealing with a botnet attack

Discussion in 'Apache' started by thetalltree, Dec 16, 2011.

  1. #1
    Hey guys, my site's on a shared apache server and for the past 2 weeks is under attack from botnets. The IPs are just too many and do not follow a specific IP range for me to block. I have blocked over 2000 IPs in htaccess to no avail.

    Also all the 'user agents' look quite legitimate except for a few from funwebproducts that I blocked.

    Blank Referrals
    --------------
    Logs indicate that all these attacks are from 'Blank Referrals'.

    Initially I blocked all traffic from 'blank referrals' in HTaccess. That completely stopped the bots but that also stopped legitimate traffic and search engine bots like Googlebot. Some of my website's pages got removed from the Google index because of this. Hence I had to remove the 'blank referral' block.

    Is there any way to block empty referrals and still allow Googlebot?

    These bots are taking around 12GB a day by accessing and re-accessing the same file again and again. So I need to stop this fast.

    I am looking for an expert who can give me a solution and I am ready to pay if my issue is resolved. Please send me a private or if anyone would like to help for free, you are most welcome. Please let me know what I can possibly do?


     
    thetalltree, Dec 16, 2011 IP
  2. Neil Robins

    Neil Robins Active Member

    Messages:
    61
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    95
    #2
    Have you contacted your host? They might be able to assist &/or provide help.

    Neil
     
    Neil Robins, Dec 16, 2011 IP
  3. ideamine

    ideamine Member

    Messages:
    83
    Likes Received:
    2
    Best Answers:
    2
    Trophy Points:
    28
    #3
    Hi,

    We are ready to help you. Please feel free to drop an email to sales at ideaminetech.com. We are a server management company and provide 24/7 support on everyday of a year.

    Thanks & regards,
     
    ideamine, Dec 18, 2011 IP
  4. |-:Bharat:-|

    |-:Bharat:-| Well-Known Member

    Messages:
    179
    Likes Received:
    3
    Best Answers:
    0
    Trophy Points:
    145
    #4
    Well as he said its an shared hosting , so i guess you are not allowed till server guys allow you to ? Anyways buddy you can try contacting your hosts and ask them to protect the server as you are getting attacks regularly.
     
    |-:Bharat:-|, Dec 18, 2011 IP