Blocking some traffic

[Positive]

I have lots of spam listings on one of my directory and strange thing is that these visits aren't even recognized by cpanel awstats because actual number of visits are lower than listings. So I think someone just submits to my form directly without going to the site (or something like that.. can't figure it out). What could be done to block such traffic? Thanks..

[thewebhostingdir]

I would suggest to check FTP logs and find out from which IP addresses it was done. You can block those IP addresses in server firewall later on.

[thewebhostingdir]

If you have an SSH access to the server then you can check the FTP logs from the below mentioned location :

/var/log/messages

[javaidanwar]

You can require that the http header on the post processing script contain a referring url from your site, but as this is an optional header this will break the site for some users (e.g. some security products strip out this header).

So your best bet is to implement a captcha.

[Gursimran]

If you are using kloxo/lxadmin
it is ver simple to do this thing in its panel

[yogodating123]

There are some addons which you may install in you browser that will block traffic which you want.

[thewebhostingdir]

Blocking traffic through installing addons is good but analysis of FTP logs is most important so that you can get clear picture of why is it happened?

[zorveo]

Easy: IP Deny Manager. It is a feature in cPanel.

[pcfactor]

Yeah what he said Looking at the raw logs finding the offending IP's and then using Cpanel's IP Deny is the best route to go. Don't over analyze the problem or the solution. As a matter of fact if you are not sure how to find out what IP's are causing the problem, almost any hosting company will be more than happy to help when it comes to security, submit a ticket and they can definitely take a look, fix it, or show you how to.

Hope that helps

[karmadir]

If nothing works

If nothing works, you can reply them back that you are not interested in their products or service.

I also received lot of spam mail, I used this tactic of simply mailing them politely of not interested in their service or product. Most of them never replied.

But, use this if you are not able to find or block ip addresses.

[Ian Walker]

I think it is better to check an ip address in log file and restrict those ip's.

[kinah]

If you have an SSH access to the server then you can check the FTP logs from the below mentioned location :

/var/log/messages

[twenty.one]

I have lots of spam listings on one of my directory and strange thing is that these visits aren't even recognized by cpanel awstats because actual number of visits are lower than listings. So I think someone just submits to my form directly without going to the site (or something like that.. can't figure it out). What could be done to block such traffic? Thanks..

Blocking IP is simple. But identify the rightful IP to block is a bit tricky. Check this tutorial here on how to block IP using .htaccess - http://www.clockwatchers.com/htaccess_block.html

Another thing to note, if you happen to observe that a lot of them submit directly without visit your site, then it could something like it has been injected with some PHP could that automate the submission to your site coming from a third party host. If that's the case, your site's been hacked.

[wingmaiker]

It should necessary that the http header on the post processing script contain a referring url from this site, but as this is an voluntary header this will break the site for some users.

[eoinbronks]

To find out from which IP addresses it was done, I suggest you check FTP logs. In server firewall, you can block IP addresses.