High Bandwidth

openmind posted this at 19:15 — 16th October 2002.

Joined: Aug 2001

Over the last couple of days I have noticed a high amount of bandwidth being used for my site by one individual IP address. To give an idea they are using at least five time the amount of the second largest. Is this something I should be concerned about or am I being paranoid!? They don't rank highly in the page views or the lenngth of stay on the site...

Any ideas?

zollet posted this at 20:08 — 16th October 2002.

He has: 1,016 posts

Joined: May 2002

Scan the logs for that IP to see what they've been up to. If needed, block them with .htaccess.

openmind posted this at 22:04 — 18th October 2002.

He has: 945 posts

Joined: Aug 2001

Well they don't seem to have been up too much. I think it might have been a searchbot because they haven't been back since.

How would I blosk their IP with a .htaccess file?

Thanks for the advice on this one zollet

mjames posted this at 03:14 — 19th October 2002.

They have: 2,064 posts

Joined: Dec 1999

Quote: Originally posted by flipper
Well they don't seem to have been up too much. I think it might have been a searchbot because they haven't been back since.

How would I blosk their IP with a .htaccess file?

Thanks for the advice on this one zollet

This should help you:

Quote: http://www.freewebmasterhelp.com/tutorials/htaccess/2

Deny/Allow Certian IP Addresses

In some situations, you may want to only allow people with specific IP addresses to access your site (for example, only allowing people using a particular ISP to get into a certian directory) or you may want to ban certian IP addresses (for example, keeping disruptive memembers out of your message boards). Of course, this will only work if you know the IP addresses you want to ban and, as most people on the internet now have a dynamic IP address, so this is not always the best way to limit usage.

You can block an IP address by using:

deny from 000.000.000.000

where 000.000.000.000 is the IP address. If you only specify 1 or 2 of the groups of numbers, you will block a whole range.

You can allow an IP address by using:

allow from 000.000.000.000

where 000.000.000.000 is the IP address. If you only specify 1 or 2 of the groups of numbers, you will allow a whole range.

If you want to deny everyone from accessing a directory, you can use:

deny from all

but this will still allow scripts to use the files in the directory.

colorspots posted this at 21:04 — 21st October 2002.

They have: 20 posts

Joined: Aug 2002

you can also do a trace route and find out who the ip belongs to.
I personally use SmartWhoIs as a Network Admin/Webmaster.
http://www.tamos.com/download/main/
i am not affiliated with this product in any way other than I use it at my job.

behind every successful man is one surprised mother-in-law

FunkyJ posted this at 18:44 — 26th November 2002.

They have: 37 posts

Joined: Nov 2002

Or you can do a tracert in Windows (dos) or traceroute in Unix

Mark Hensler posted this at 03:25 — 27th November 2002.

He has: 4,048 posts

Joined: Aug 2000

Why would you use a trace route from a machine that is not at your location? That remote machine probably uses a different path, and so, that defeats the whole purpose.

Mark Hensler
If there is no answer on Google, then there is no question.

FunkyJ posted this at 05:14 — 27th November 2002.

They have: 37 posts

Joined: Nov 2002

Just to see where that IP is 'hosted' so that you can either complain to his/her ISP or server provider.

Works well with SPAM websites

Mark Hensler posted this at 06:27 — 27th November 2002.

He has: 4,048 posts

Joined: Aug 2000

Then why use trace route? Why not do a reverse IP lookup?
It's faster, and will give you more specific info about the person (or co.) who owns the IP.

Mark Hensler
If there is no answer on Google, then there is no question.

FunkyJ posted this at 14:33 — 27th November 2002.

They have: 37 posts

Joined: Nov 2002

Yes, you can do reverse IP lookup if that is available. However, not all IP address is setup so that it can be reverse.

Then you will do a traceroute and find out where the IP is hosted.
You can also find out who owns the IP from arin.net (not sure they release those info now or not)