[Xitami] IP address PARKED on my server! Please help!

Tom Baker xitami@lists.xitami.org
Tue, 1 Jul 2003 00:05:41 -0500


I'd do a reverse DNS lookup on the IP. If this fails, at least find out who
owns that IP block.
Compare that with the IP's used by Sitemeter, yourself, and any other
relevant IP addresses.

Do mean that the IP has always made a request, or that the IP has a port 80
connection that it sustains?
If it's simply that is shows up in you log every day, I would guess it to be
port scanner or trojan infected PC trying to find a way in to your server.
I get about 100 malicious requests a day on port 80 alone.

Tom

----- Original Message ----- 
From: "tom buckley" <jglennqualls@hotmail.com>
To: <xitami@lists.xitami.org>
Sent: Monday, June 30, 2003 6:31 PM
Subject: [Xitami] IP address PARKED on my server! Please help!


>
>   Hello everyone,
>
>   I've got a problem (I think) and I'd sure like to hear from you guys as
to
> what you think it is, and what to do about it!  I use one of the online
> hit-counter, "Sitemeter", that lets you check how many hits you have as
well
> as where they come from and how long they stay.  Everytime I check it I"ve
> noticed that there is one particular ip address ALWAYS there!  At first I
> just thought that this person enjoyed my site, lol, and spent a lot of
time
> there, but now I'm getting a bit worried about it!  What could this be?
Are
> they just linked to an image on my site, or are they spying or hacking me
or
> what?  Also, how can I go about blocking that ip addy?  I have seen some
of
> you talking about this in the past, and would really like to know what you
> think this is, as well as what to do about it!  Thanks to all of you in
> advance, and I hope you all are having a good day!  Happy upcoming 4th!
>
>    jgq
> +++++++
>
> _________________________________________________________________
> Help STOP SPAM with the new MSN 8 and get 2 months FREE*
> http://join.msn.com/?page=features/junkmail
>
>
> --
> Xitami Users Mailing List -- For Xitami support
> To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami
>