Re: [PHP] page suck attack




Can you check your logs and look at the user agent for what's making the
connections? Could it just be a search engine crawler indexing your pages?
You can control access, usually, via a robots.txt exclusion file.

If it's someone else mirroring your site for some reason, some programs that
do this will obey robots.txt settings.

If it's happening a lot and degrading the performance of your web server,
then it may be a DOS (denial of service) attack.

By the basic description you gave, it doesn't sound like an attack.

-TG

----- Original Message -----
From: robert <roadtested@xxxxxxxxx>
To: PHP <php-general@xxxxxxxxxxxxx>
Date: Wed, 21 May 2008 08:54:20 -0700
Subject: [PHP] page suck attack

Hi
Every so often my site is "attacked" in which all URLS on my site are
retrieved in the span of minutes. What is this called?? I mean what do
I google for? I don't know where to begin.

I'm not sure if I am going to implement such at thing but I would like
to be able to research it to know my options.

thank you
robert

.



Relevant Pages

  • Re: Dictatorship Rules HWC.Com
    ... > through a "denial of service" attack. ... > their machines. ... > repeatedly open connections and block them out. ... this means that A) you could have a trojan program that was ...
    (rec.toys.cars)
  • Re: New virus?
    ... P2P networks, listen on TCP port 81, and attempt downloading files ... witnessed outbound connections on TCP port 81, ... web servers via HTTP in order to register itself with the server's ... attack targeting two unrelated financial services organizations. ...
    (sci.med.transcription)
  • Re: Dictatorship Rules HWC.Com
    ... through a "denial of service" attack. ... When you get thousands of machines ... repeatedly open connections and block them out. ... this means that A) you could have a trojan program that was ...
    (rec.toys.cars)
  • Re: SNORT or other IDS
    ... Turned out it was not an attack... ... connections. ... NO_CACHE so the aol cache servers were hamering us with requests... ... We are using foundry loadbalancer... ...
    (microsoft.public.security)
  • Re: server udp port 60556 (Unix Box) attacked by 18.18.18.18
    ... Snooping or a denial of service attack? ... someone who used PortSentry to automatically block connections to ... be able to rate limit connections. ... outboard monitoring box could be practical. ...
    (comp.security.misc)