Is this a DDoS attack?

[CloudShadow]

This screenshot is from Cpanel's latest visitors section, and for the past 3 hours this ip has been accessing my index.php like that. If this IS a ddos attack, can someone tell me how can i block this guy?

CloudShadow Reviewed by CloudShadow on 27th May 2011. Is this a DDoS attack? This screenshot is from Cpanel's latest visitors section, and for the past 3 hours this ip has been accessing my index.php like that. If this IS a ddos attack, can someone tell me how can i block this guy? http://imgcrave.com/u/ddos.jpg Rating: 5

[BlaZe]

It can be DoS as its only 1 single IP from Istanbul, Turkey.

http://www.utrace.de/whois/78.171.132.17

I guess your website has a hater.

Just restrict usage from his IP using .htaccess

EDIT:

Add these lines in your .htaccess file

order allow,deny
deny from 78.171.132.17
allow from all

[CloudShadow]

I've tried doing that actually, but it doesn't seem to work. What if i use the option in Cpanel, this one



Will this stop him? I had to take my site down because of this guy, the CPU levels were soaring,

[Mareshal]

from cPanel is better

If you use htaccess, the request still comes to the web server, then it searches for htaccess and denies it, so the CPU is still used

[Dom]

Add him to your CSF / IPTABLES :

DROP  all opt -- in !lo out *  78.171.132.17  -> 0.0.0.0/0   DROP  all opt -- in * out !lo  0.0.0.0/0  -> 78.171.132.17

[CloudShadow]

@ Domenic

the problem is, i'm on a shared hosting, not a VPS. I've asked my hosting to block the IP, but they haven't replied yet. So i'm in quite a mess right now.



I wasn't expecting so many people, lol

[Dom]

Thats why you need a VPS buddy

[Mareshal]

Did you try cPanel ?

[CloudShadow]

Yes, i have entered the ip in Cpanel. I'm restoring the home directory now, lets see what happens.

[Lifetalk]

Keep us updated. I may have an alternative solution.