httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Steelhead <b...@ries-knight.net>
Subject zombie hits from undesired sites
Date Wed, 05 Jan 2005 15:09:01 GMT
We are seeing a major issue.. there are apparently hundreds and 
thousands of zombies attaching to our servers with  to bump the referrer 
logs so they gain Google share.

Is there a way to filter this type of attack out?

Sample edited webalyzer output.. you san see that most are from p0rn sites.

1 	4400 	18.08% 	- (Direct Request)
2 	2342 	9.62% 	http://www.music-downloads.music-download-4u.net
3 	2128 	8.74% 	**
4 	1774 	7.29% 	http://guideforcasinos.com/
5 	1462 	6.01% 	http://godwebdesign.com/
6 	1305 	5.36% 	http://fisting-sex.net/
7 	1116 	4.59% 	http://maturegalleries.org/
8 	854 	3.51% 	http://here.homeftp.net/
9 	740 	3.04% 	**
10 	653 	2.68% 	http://rock-music.music-download-4u.net
11 	571 	2.35% 	http://www.mp3-song.areaofmusic.net
12 	525 	2.16% 	http://www.download-music4.mp3shka.net.ru
13 	500 	2.05% 	http://www.bumar-hydraulics.com
14 	420 	1.73% 	http://music-cd.music-download-4u.net
15 	413 	1.70% 	**
16 	296 	1.22% 	http://mp3se.com/
17 	287 	1.18% 	http://www.google.com/search
18 	282 	1.16% 	http://dirty.isa-geek.org/
19 	251 	1.03% 	http://trail.bounceme.net/
20 	234 	0.96% 	**
21 	215 	0.88% 	http://darkfetish.dvd-home-theatre.com/
22 	211 	0.87% 	http://hardcore-porn-pictures.biz/
23 	183 	0.75% 	http://www.searching-for-bedding.com/
24 	179 	0.74% 	http://pharmacy.dvd-home-theatre.com/
25 	179 	0.74% 	http://www.searching-for-loans.com/
26 	178 	0.73% 	http://www.mp3se.com/
27 	157 	0.65% 	**
28 	138 	0.57% 	http://www.men-footwear.com/
29 	130 	0.53% 	http://www.pharmacy-top100.com/
30 	103 	0.42% 	**

** url removed to protect the sites.
-- 
Bill Ries-Knight
Stockton, CA

Respect life:
Donate blood as you can.
Donate your used parts when no longer needed.


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message