Website with changing IP attacking

vaudevillian · Worker Joined: Jan 18, 2008 Posts: 139

I have been under attack from a website

Only registered users can see links on this board!
Get registered or login to the forums!

for the past few weeks. The ip keeps changing as well.

They are always trying to access my foum prune. It is getting a little annoying.

evaders99 · Posted: Mon Jun 02, 2008 3:51 pm

I don't know why they would go for forum prune. Do you have an example of such attacks?

vaudevillian · Worker Joined: Jan 18, 2008 Posts: 139

next attack I will post the code and the info relating to it.

Susann · Posted: Tue Jun 03, 2008 9:14 am

These attacks are nothing special and doesn´t work. Search for libwww-perl
and maybe try this in your .htaccess

Quote:

RewriteEngine on
RewriteCond %{HTTP_USER_AGENT} ^libwww-perl/[0-9].[0-9]*
RewriteRule ^.*$

Only registered users can see links on this board!
Get registered or login to the forums!

[R,L]

vaudevillian · Worker Joined: Jan 18, 2008 Posts: 139

Does that block all perl agents?

Susann · Posted: Tue Jun 03, 2008 10:32 am

R = redirect

I don´t get notifications but I see these agents in my logs.

evaders99 · Posted: Tue Jun 03, 2008 12:31 pm

It should block most dumb Perl scripts that don't forge a User-Agent. Smile

dad7732 · Posted: Sun Jul 13, 2008 10:29 am

Add this to your .htaccess and it will stop most scripts from getting in.

Code:

# Stop Scripts Beforehand
RewriteEngine On
RewriteCond %{THE_REQUEST} .*http:\/\/.* [OR]
RewriteCond %{THE_REQUEST} .*http%3A%2F%2F.*
Rewriterule ^.* - [F]

Been a long time since I've seen Sentinel block a script because of the above entry.

Cheers