The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

this one is driving me nuts - beavermails.com

Discussion in 'E-mail Discussions' started by KirkColvin747, Dec 22, 2006.

  1. KirkColvin747

    KirkColvin747 Member

    Joined:
    Mar 17, 2005
    Messages:
    12
    Likes Received:
    0
    Trophy Points:
    151
    HUGE server load, diff. IPs, all preceeded by google js (which is on our webpages), and then the GET entry of an ad from referrer beavermails.com.

    Anyone seen this crap before? Is our server acting as proxy for them?

    -Kirk

    main site is www.snarfware.com

    61.173.199.214 - - [22/Dec/2006:07:19:44 -0500] "GET http://www.google-analytics.com/urchin.js HTTP/1.0" 404 10844 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows NT)"
    61.173.199.214 - - [22/Dec/2006:07:21:24 -0500] "GET http://popunder.adsrevenue.net/links.php?data=rSe_2%2F%FE.-%2B5%7C%2A1-%24S%5C7%5D_Yq_%5DsK%7Dmj%60S%5C7%2B.%FE%2B1%FErS%5C7%26%2F%20%2B0%2C1%7B%2F2&id=haoyehua&subid=60137&tid=1163673278&clater=&m=75&o=1&c=27448&a=32769&q=6&s=%3C%3D&ah=10&al=0&l=english&campaign=&rurl=&serverfile=paypopup&ref=http%3A//beavermails.com&os=W1&bs=I2&isframe=false&bk=1&serverfile=popnetwork HTTP/1.0" 301 742 "-" "Mozilla/4.0 (compatible; MSIE 4.0; Windows 95)
     
    #1 KirkColvin747, Dec 22, 2006
    Last edited: Dec 22, 2006
  2. lostinspace

    lostinspace Well-Known Member

    Joined:
    Jul 19, 2003
    Messages:
    122
    Likes Received:
    1
    Trophy Points:
    168
    Location:
    Colorado Springs, CO
    Personally, I'd ban the subnet. Unless you'll miss hits from China?

    Also, are the loads caused from numerous connections? If so, there's some nice FW's that will temp ban IPs based on connections (Chirpy's CSF/LFD combo for example).
     
    #2 lostinspace, Dec 22, 2006
    Last edited: Dec 22, 2006
(You must log in or sign up to post here.)
Loading...
Similar Threads - driving nuts beavermails
  1. Kent Brockman

    Why some scripts go nuts with PHP on fcgi mode?

    Kent Brockman, Aug 23, 2016, in forum: EasyApache
    Replies:
    2
    Views:
    391
    Kent Brockman
    Sep 27, 2016

Share This Page