Hi,
Looking through my firewall logs for yesterday and today I've noticed
that there was one site constantly retreiving one page from my web
server. It retreived it over 90 times in a 12 hour period. I've
blocked all traffic from that machine (209.204.137.249) yet the
requests continue. This leads me to belive somebody maybe planting
and running automated scripts to cause heavy legitimate looking traffic.
What caused me to notice it was a string of 7 retreivals in a row. Then
I noticed all the previous retreivals searching through the logs on the
IP address. The accesses are comming in at 2 to 5 minute intervals.
--
| Bryan Andersen | [EMAIL PROTECTED] | http://softail.visi.com |
| Buzzwords are like annoying little flies that deserve to be swatted. |
| -Bryan Andersen |
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
