Botnet type attack on my site

  • leeiah

    (@leeiah)


    10 years, 2 months ago

    My site has been attacked daily the past few months by some kind of botnet, hitting my homepage over and over; thousands of hits per day, but appearing like a normal visitor by spacing out the hits in intervals, but using about 100 bots or more per day to continuously hit my site in those intervals. I’ve blocked almost 500 IP’s via Wordfence where the User Agent String is the same, but new ones keep popping up and it’s pretty much futile, not to mention dynamic IPs, so I’ve probably blocked a lot of legitimate readers once the infected computers this hacker is using disconnect and reconnect.

    Below are some hits I copied and pasted so you can see the user agent string(s). I blocked out my blog with ‘mysite’ because I’m not comfortable putting my URL up due to the current circumstances.

    Frankfort, United States visited http://www.mysite.com/
    2/15/2016 2:40:22 PM (57 seconds ago) IP: 2602:306:bdde:2580:3c5e:5c7b:e1e:e9d5 [unblock]
    Browser: Firefox version 44.0 running on Win7
    Mozilla/5.0 (Windows NT 6.1; WOW64; rv:44.0) Gecko/20100101 Firefox/44.0

    West Palm Beach, United States visited http://www.mysite.com/
    2/17/2016 7:29:00 AM (1 minute ago) IP: 73.1.94.216 [unblock] Hostname: c-73-1-94-216.hsd1.fl.comcast.net
    Browser: Chrome version 48.0 running on Win7
    Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.109 Safari/537.36

    United States Liverpool, United States visited http://www.mysite.com/
    2/17/2016 6:33:15 AM (1 minute ago) IP: 108.183.196.210 [unblock] Hostname: cpe-108-183-196-210.twcny.res.rr.com
    Browser: Chrome version 48.0 running on Win10
    Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.109 Safari/537.3

    San Francisco, United States visited http://www.mysite.com/
    2/16/2016 8:37:23 PM (7 minutes ago) IP: 67.160.203.142 [unblock] Hostname: c-67-160-203-142.hsd1.ca.comcast.net
    Browser: Firefox version 38.0 running on Win8.1
    Mozilla/5.0 (Windows NT 6.3; WOW64; rv:38.0) Gecko/20100101 Firefox/38.0

    Wooster, United States visited http://www.mysite.com/
    2/16/2016 9:43:54 PM (1 minute ago) IP: 24.140.69.182 [unblock] Hostname: cable-69-182.sssnet.com
    Browser: Chrome version 48.0 running on Win7
    Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.109 Safari/537.36

    I’m exhausted and don’t know what to do since I’m not tech savvy. I would hire someone to help, but I wouldn’t know who or where to go for someone trustworthy and reputable.

    Can anyone please help or steer me in the right direction for help and/or whom I could turn to/hire who could stop these constant attacks?

    Thank you.

Viewing 3 replies - 1 through 3 (of 3 total)
Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Botnet type attack on my site’ is closed to new replies.