[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] Finding IP From access log
- Subject: Re: [cobalt-users] Finding IP From access log
- From: "Bas van Ecke" <bas.vanecke@xxxxxxxxxx>
- Date: Fri Aug 15 07:51:02 2003
- List-id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
> Anyone know where to look to find the actual IP of the user connecting
> based on an entry in the access log? I spotted an apparent abusive bot
> ignoring robots.txt and hitting some script driven pages to the tune of
> about 10 attempts per second. Ditto grabbing .html files at the same
> rate. The entry in the access log is an invalid sub-domain:
>
> www.example.com unassigned.webex.com - - [15/Aug/2003:08:40:32 -0500]
> "GET /index.html HTTP/1.1" 200 17610 "-" "Mozilla/4.0 (compatible; MSIE
> 5.0; Windows NT; DigExt)"
Ip-block of webex.com: 64.68.96.0 - 64.68.127.255
You could start with blocking it and see if unassigned.webex.com uses one
of those.
Regards, Bas