The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

bots using bandwidth

Discussion in 'Security' started by czerdrill, Dec 19, 2011.

  1. czerdrill

    czerdrill Well-Known Member

    Joined:
    Feb 18, 2011
    Messages:
    70
    Likes Received:
    0
    Trophy Points:
    6
    I have some unknown bots in AWStats using 8-10GB of bandwidth but I dont know how to block them since it doesn't list their IP addresses. Where can I find this info so I can block them, and how would I identify them?
     
  2. alphawolf50

    alphawolf50 Well-Known Member

    Joined:
    Apr 28, 2011
    Messages:
    186
    Likes Received:
    2
    Trophy Points:
    18
    cPanel Access Level:
    Root Administrator
    I would suggest using ModSecurity with the GotRoot/Atomic rules. There are instructions here for installing the rules and setting them up appropriately. Pay special attention to the changes they mention for cPanel servers. Try using all the rule sets, and only disabling some if you really don't need them. The set labelled 20_asl_useragents.conf has several rules that block bots based on the user agent header. If you combine that with ConfigServer Firewall, you can automatically IP ban those bots after they are blocked by ModSecurity X number of times.
     
  3. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    14,482
    Likes Received:
    203
    Trophy Points:
    63
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
Loading...

Share This Page