300+ hits in 10 minutes from one IP?

Anon

Hi All!

For a short period of time I had several hundred hits on my PHP page from 212.45.15.67 -- one hit per 1-3 seconds, with different query strings. HTTP referers were from my own site.

Since I\'m a newcomer to PHP+mySQL, I have not much ideas what it was for. For me the possible reasons might be: retrieving a bulk of static pages (this is an information site), or trying to find a security breach.

The URL is http://www.news2news.com/vfp/index.php

If you can drop in and make a very short check, that would be great. I\'m afraid that I\'m not aware of very basic PHP-mySQL security issues. And they could be exploited now.

Thanks!
Anatoliy Mogylevets
devicecontext@msn.com

Anon

That IP is in Russia. Maybe a search engine spider? Do you know what the user agent was?

http://www.ripe.net/perl/whois?query=212.45.15.67&.submit=Submit+Query

Anon

Possibly whacking your site.
They might of been 'stealing' the content of your site. The would produce a lot of requests.

Anon

Thank you, friends, for your replies!

First I though that it could be a stranded spider, but I never put this site to any Russian searchy.

Of stealing the content - I feel fine, because this stuff is free. I'm going to put a downloadable archive soon.

My main concern -- sorry, it may sound strange; I have minimal skills in this area -- is that the server, being affected by such frequent hits, may go nuts and send outside any kind of protected info.

Oh, thouse Russians! But who I am? 🙂

toma42

wget could do this...I don't think many people call using wget stealing from a site.

alcapone

c'mon guys. comcor (the company ip range belonges to) is a provider. Not just a provider though, it is high/very high speed internet provider, which is weird itself, because we don't have too much of this kind of connection.
So, Anatoliy, odds are some rich kid who's got his connection is scanning you with some lame sec-scanner. But if it gets too hot, just write a letter to this prov and tell them whats goin' on

cheers,
AlCapone

Anon

wget could do this but it doesn't matter what people "call" it, the fact is it is still stealing from the site. Why else would you use it?

Anyway the point was invalid as Anatoliy said he didn't mind.

toma42

I use it do download entire concerts from sites like this: http://www.ptt.nycheads.com/

There are many, many legitimate uses for it.

Nathan wrote:

wget could do this but it doesn't matter what people "call" it, the fact is it is still stealing from the site. Why else would you use it?

Anyway the point was invalid as Anatoliy said he didn't mind.