showthread attack attempt?

[eth00]

While I am going to try buro9's httpd.conf fix I did find another good way to block this and other recent hack attempts I've been experiencing.
I installed the Apache Module mod_security.c using this nice tutorial http://eth0.us/?q=node/17
I used the default rule set as posted there. However he does have a few more rule sets available for D/L here at the end of the check list (about 2/3 down the page) http://eth0.us/?q=node/1


I;m amazed at how many bad requests it's already logged and sent to the forbidden page!

There is a reason the other rulesets are sort of hidden. If you do use it you are going to have to tweak and disable the rules that cause trouble with your websites. If you use the ones posted on the first link you should not have trouble with false positives I have played around awhile and found that the posted ruleset in the actual mod_security guide seems to be the best while still not picking up false positives.

[HossMon]

While I am going to try buro9's httpd.conf fix I did find another good way to block this and other recent hack attempts I've been experiencing.
I installed the Apache Module mod_security.c using this nice tutorial http://eth0.us/?q=node/17
I used the default rule set as posted there. However he does have a few more rule sets available for D/L here at the end of the check list (about 2/3 down the page) http://eth0.us/?q=node/1


I;m amazed at how many bad requests it's already logged and sent to the forbidden page!

[cirisme]

i got attack by these ips ..they are still doing it now ..

Use the useragent blocker in .htaccess posted in this thread...

[xadoa]

i got attack by these ips ..they are still doing it now ..

12.106.72.18
129.15.208.181
131.217.6.3
134.124.144.22
134.154.176.98
134.21.54.68
141.44.163.190
144.132.230.212
151.197.162.170
151.197.41.24
155.69.5.235
157.25.5.69
158.121.99.129
158.196.228.217
165.21.154.11
165.21.154.13
165.21.154.14
165.21.154.15
165.21.154.17
165.21.154.8
165.21.154.9
165.243.0.226
165.243.0.230
165.243.0.231
172.165.114.127
172.166.200.130
172.173.122.237
172.179.78.251
172.196.4.173
172.198.9.188
18.251.5.50
193.11.250.64
194.8.176.199
195.34.228.245
195.34.229.63
198.217.112.21
202.156.99.137
202.39.18.117
202.6.96.4
203.113.128.122
203.113.133.103
203.113.133.111
203.113.133.117
203.113.133.17
203.113.133.26
203.113.133.27
203.113.133.33
203.113.133.52
203.113.133.58
203.113.133.60
203.113.133.70
203.113.133.8
203.113.135.1
203.113.135.100
203.113.135.113
203.113.135.126
203.113.135.131
203.113.135.14
203.113.135.145
203.113.135.164
203.113.135.174
203.113.135.185
203.113.135.186
203.113.135.238
203.113.135.245
203.113.135.59
203.113.135.6
203.113.135.72
203.113.135.9
203.113.135.92
203.113.143.14
203.113.146.227
203.113.149.14
203.113.149.2
203.113.150.103
203.113.150.106
203.113.150.107
203.113.150.110
203.113.150.128
203.113.150.138
203.113.150.148
203.113.150.153
203.113.150.154
203.113.150.159
203.113.150.162
203.113.150.164
203.113.150.166
203.113.150.169
203.113.150.177
203.113.150.180
203.113.150.189
203.113.150.197
203.113.150.214
203.113.150.222
203.113.150.225
203.113.150.226
203.113.150.245
203.113.150.253
203.113.150.27
203.113.150.30
203.113.150.39
203.113.150.40
203.113.150.44
203.113.150.45
203.113.150.52
203.113.150.60
203.113.150.65
203.113.150.71
203.113.150.8
203.113.150.84
203.113.150.86
203.113.150.95
203.113.150.96
203.113.158.227
203.113.160.165
203.113.160.214
203.113.160.236
203.113.161.111
203.113.161.119
203.113.161.154
203.113.161.158
203.113.161.202
203.113.161.225
203.113.161.238
203.113.161.49
203.113.161.93
203.113.162.193
203.113.162.199
203.113.162.78
203.113.163.110
203.113.163.136
203.113.163.149
203.113.163.190
203.113.163.29
203.113.163.9
203.113.164.155
203.113.164.163
203.113.164.196
203.113.164.41
203.113.164.55
203.113.165.111
203.113.165.128
203.113.165.145
203.113.165.155
203.113.165.190
203.113.166.11
203.113.166.127
203.113.166.146
203.113.166.2
203.113.166.229
203.113.166.25
203.113.166.250
203.113.166.56
203.113.166.96
203.113.167.12
203.113.167.217
203.113.167.47
203.113.168.102
203.113.168.105
203.113.168.107
203.113.168.127
203.113.168.145
203.113.168.18
203.113.168.194
203.113.168.197
203.113.168.208
203.113.168.222
203.113.168.243
203.113.168.244
203.113.168.41
203.113.168.61
203.113.168.83
203.113.168.91
203.113.168.98
203.113.169.100
203.113.169.114
203.113.169.115
203.113.169.117
203.113.169.118
203.113.169.153
203.113.169.158
203.113.169.160
203.113.169.217
203.113.169.219
203.113.169.42
203.113.169.43
203.113.169.8
203.113.169.82
203.113.169.86
203.113.170.140
203.113.170.148
203.113.170.164
203.113.170.171
203.113.170.174
203.113.170.200
203.113.170.226
203.113.170.44
203.113.170.52
203.113.172.105
203.113.172.115
203.113.172.123
203.113.172.128
203.113.172.155
203.113.172.16
203.113.172.194
203.113.172.205
203.113.172.232
203.113.172.237
203.113.172.35
203.113.172.43
203.113.172.48
203.113.172.56
203.113.172.7
203.113.172.97
203.113.173.170
203.113.173.174
203.113.173.187
203.113.173.199
203.113.173.201
203.113.173.207
203.113.173.215
203.113.173.238
203.113.173.69
203.122.76.155
203.160.110.19
203.160.1.69
203.162.109.232
203.162.111.28
203.162.111.62
203.162.111.75
203.162.112.41
203.162.112.80
203.162.113.13
203.162.120.25
203.162.120.27
203.162.120.32
203.162.120.5
203.162.121.189
203.162.121.213
203.162.121.219
203.162.121.233
203.162.122.116
203.162.122.138
203.162.122.162
203.162.122.175
203.162.122.179
203.162.122.246
203.162.122.39
203.162.122.42
203.162.122.57
203.162.122.68
203.162.122.99
203.162.123.118
203.162.123.12
203.162.123.138
203.162.123.14
203.162.123.145
203.162.123.165
203.162.123.166
203.162.123.186
203.162.123.195
203.162.123.211
203.162.123.213
203.162.123.22
203.162.123.224
203.162.123.28
203.162.123.48
203.162.123.6
203.162.123.60
203.162.123.63
203.162.123.82
203.162.124.17
203.162.126.114
203.162.126.127
203.162.126.147
203.162.126.154
203.162.126.30
203.162.126.32
203.162.126.36
203.162.126.78
203.162.126.86
203.162.127.131
203.162.127.194
203.162.129.228
203.162.129.243
203.162.129.254
203.162.129.71
203.162.130.197
203.162.130.94
203.162.131.185
203.162.133.103
203.162.133.124
203.162.133.22
203.162.133.25
203.162.133.29
203.162.133.56
203.162.133.62
203.162.133.70
203.162.133.75
203.162.133.78
203.162.140.119
203.162.140.28
203.162.151.84
203.162.152.108
203.162.152.30
203.162.15.24
203.162.153.142
203.162.154.109
203.162.154.31
203.162.155.34
203.162.156.138
203.162.157.104
203.162.157.67
203.162.158.148
203.162.158.175
203.162.159.168
203.162.159.176
203.162.159.193
203.162.160.220
203.162.162.114
203.162.162.155
203.162.169.144
203.162.169.20
203.162.169.44
203.162.169.75
203.162.170.1
203.162.170.107
203.162.170.122
203.162.170.134
203.162.170.145
203.162.170.177
203.162.170.199
203.162.170.217
203.162.170.223
203.162.170.233
203.162.170.235
203.162.170.252
203.162.170.26
203.162.170.32
203.162.170.34
203.162.170.38
203.162.170.51
203.162.170.7
203.162.170.88
203.162.170.97
203.162.170.99
203.162.171.130
203.162.172.12
203.162.172.16
203.162.172.169
203.162.172.188
203.162.172.86
203.162.177.116
203.162.177.125
203.162.177.131
203.162.177.144
203.162.177.183
203.162.177.187
203.162.177.207
203.162.177.27
203.162.177.55
203.162.177.62
203.162.177.70
203.162.177.83
203.162.177.96
203.162.178.134
203.162.178.151
203.162.178.162
203.162.178.174
203.162.178.198
203.162.178.219
203.162.178.241
203.162.18.198
203.162.186.16
203.162.186.22
203.162.186.40
203.162.187.108
203.162.187.137
203.162.187.9
203.162.188.49
203.162.188.84
203.162.189.104
203.162.190.120
203.162.190.164
203.162.190.39
203.162.191.106
203.162.191.188
203.162.196.107
203.162.196.246
203.162.196.45
203.162.198.213
203.162.198.232
203.162.210.51
203.162.213.109
203.162.215.8
203.162.219.192
203.162.222.14
203.162.223.143
203.162.223.152
203.162.223.180
203.162.223.51
203.162.232.151
203.162.232.214
203.162.232.71
203.162.233.253
203.162.234.216
203.162.234.28
203.162.234.58
203.162.234.66
203.162.235.211
203.162.235.52
203.162.235.53
203.162.235.87
203.162.236.104
203.162.236.134
203.162.236.158
203.162.236.183
203.162.236.199
203.162.236.233
203.162.236.234
203.162.236.241
203.162.236.243
203.162.236.25
203.162.236.3
203.162.236.36
203.162.236.45
203.162.236.81
203.162.236.85
203.162.236.90
203.162.236.92
203.162.236.94
203.162.237.77
203.162.238.121
203.162.238.152
203.162.238.210
203.162.238.218
203.162.238.32
203.162.238.55
203.162.240.161
203.162.240.167
203.162.240.169
203.162.240.17
203.162.240.216
203.162.240.39
203.162.240.55
203.162.240.87
203.162.240.99
203.162.241.12
203.162.242.8
203.162.243.114
203.162.243.122
203.162.243.14
203.162.243.17
203.162.243.23
203.162.243.25
203.162.243.26
203.162.243.27
203.162.243.47
203.162.243.48
203.162.243.78
203.162.243.91
203.162.253.113
203.162.253.12
203.162.253.140
203.162.253.222
203.162.253.227
203.162.253.45
203.162.253.8
203.162.255.160
203.162.3.145
203.162.3.146
203.162.3.147
203.162.3.148
203.162.34.103
203.162.35.43
203.162.36.132
203.162.37.10
203.162.3.77
203.162.46.89
203.162.52.113
203.162.52.115
203.162.54.108
203.162.54.119
203.162.54.227
203.162.54.249
203.162.54.41
203.162.54.88
203.162.7.66
203.162.91.86
203.162.92.143
203.162.93.12
203.164.163.137
203.164.163.92
203.173.252.64
203.201.65.197
203.210.208.251
203.210.209.1
203.210.209.101
203.210.209.110
203.210.209.111
203.210.209.116
203.210.209.122
203.210.209.129
203.210.209.132
203.210.209.15
203.210.209.153
203.210.209.16
203.210.209.17
203.210.209.18
203.210.209.196
203.210.209.199
203.210.209.247
203.210.209.25
203.210.209.251
203.210.209.29
203.210.209.31
203.210.209.4
203.210.209.43
203.210.209.45
203.210.209.51
203.210.209.55
203.210.209.62
203.210.209.66
203.210.209.76
203.210.209.9
203.210.210.103
203.210.210.108
203.210.210.109
203.210.210.116
203.210.210.125
203.210.210.129
203.210.210.147
203.210.210.149
203.210.210.151
203.210.210.157
203.210.210.17
203.210.210.181
203.210.210.182
203.210.210.188
203.210.210.190
203.210.210.207
203.210.210.22
203.210.210.23
203.210.210.239
203.210.210.24
203.210.210.245
203.210.210.249
203.210.210.28
203.210.210.30
203.210.210.34
203.210.210.46
203.210.210.79
203.210.210.89
203.210.211.1
203.210.211.100
203.210.211.105
203.210.211.106
203.210.211.136
203.210.211.155
203.210.211.161
203.210.211.162
203.210.211.164
203.210.211.167
203.210.211.17
203.210.211.173
203.210.211.181
203.210.211.230
203.210.211.236
203.210.211.242
203.210.211.246
203.210.211.248
203.210.211.32
203.210.211.37
203.210.211.5
203.210.211.62
203.210.211.86
203.210.211.87
203.210.211.92
203.210.212.104
203.210.212.108
203.210.212.119
203.210.212.124
203.210.212.126
203.210.212.133
203.210.212.135
203.210.212.156
203.210.212.176
203.210.212.193
203.210.212.195
203.210.212.211
203.210.212.212
203.210.212.220
203.210.212.226
203.210.212.227
203.210.212.234
203.210.212.236
203.210.212.24
203.210.212.247
203.210.212.252
203.210.212.28
203.210.212.3
203.210.212.35
203.210.212.36
203.210.212.52
203.210.212.53
203.210.212.59
203.210.212.63
203.210.212.67
203.210.212.8
203.210.212.86
203.210.212.95
203.210.213.1
203.210.213.104
203.210.213.11
203.210.213.149
203.210.213.15
203.210.213.193
203.210.213.211
203.210.213.218
203.210.213.3
203.210.213.44
203.210.213.75
203.210.213.9
203.210.213.92
203.210.214.1
203.210.214.132
203.210.214.141
203.210.214.163
203.210.214.170
203.210.214.171
203.210.214.175
203.210.214.178
203.210.214.180
203.210.214.191
203.210.214.196
203.210.214.210
203.210.214.217
203.210.214.225
203.210.214.226
203.210.214.238
203.210.214.249
203.210.214.250
203.210.214.28
203.210.214.33
203.210.214.40
203.210.214.41
203.210.214.45
203.210.214.46
203.210.214.53
203.210.214.61
203.210.214.70
203.210.214.80
203.210.214.86
203.210.214.99
203.210.215.101
203.210.215.105
203.210.215.107
203.210.215.109
203.210.215.115
203.210.215.122
203.210.215.13
203.210.215.132
203.210.215.133
203.210.215.158
203.210.215.181
203.210.215.193
203.210.215.204
203.210.215.207
203.210.215.219
203.210.215.222
203.210.215.228
203.210.215.234
203.210.215.238
203.210.215.241
203.210.215.242
203.210.215.245
203.210.215.32
203.210.215.34
203.210.215.4
203.210.215.42
203.210.215.79
203.210.215.83
203.210.215.91
203.210.215.95
203.210.216.105
203.210.216.112
203.210.216.13
203.210.216.143
203.210.216.166
203.210.216.17
203.210.216.184
203.210.216.186
203.210.216.191
203.210.216.192
203.210.216.233
203.210.216.24
203.210.216.254
203.210.216.31
203.210.216.32
203.210.216.34
203.210.216.46
203.210.216.52
203.210.216.6
203.210.216.81
203.210.217.10
203.210.217.111
203.210.217.114
203.210.217.124
203.210.217.125
203.210.217.143
203.210.217.148
203.210.217.151
203.210.217.156
203.210.217.160
203.210.217.165
203.210.217.17
203.210.217.187
203.210.217.191
203.210.217.195
203.210.217.200
203.210.217.213
203.210.217.214
203.210.217.229
203.210.217.234
203.210.217.48
203.210.217.6
203.210.217.64
203.210.217.67
203.210.217.69
203.210.217.71
203.210.217.73
203.210.217.75
203.210.217.90
203.210.217.94
203.210.218.107
203.210.218.11
203.210.218.116
203.210.218.119
203.210.218.127
203.210.218.129
203.210.218.137
203.210.218.139
203.210.218.146
203.210.218.156
203.210.218.16
203.210.218.165
203.210.218.174
203.210.218.178
203.210.218.18
203.210.218.183
203.210.218.202
203.210.218.22
203.210.218.239
203.210.218.244
203.210.218.245
203.210.218.27
203.210.218.29
203.210.218.46
203.210.218.51
203.210.218.55
203.210.218.61
203.210.218.64
203.210.218.7
203.210.218.74
203.210.218.79
203.210.218.85
203.210.218.88
203.210.218.96
203.210.219.108
203.210.219.125
203.210.219.129
203.210.219.134
203.210.219.136
203.210.219.141
203.210.219.143
203.210.219.145
203.210.219.149
203.210.219.150
203.210.219.151
203.210.219.154
203.210.219.158
203.210.219.16
203.210.219.160
203.210.219.164
203.210.219.165
203.210.219.172
203.210.219.173
203.210.219.18
203.210.219.194
203.210.219.200
203.210.219.21
203.210.219.210
203.210.219.213
203.210.219.219
203.210.219.225
203.210.219.23
203.210.219.232
203.210.219.236
203.210.219.240
203.210.219.25
203.210.219.44
203.210.219.45
203.210.219.46
203.210.219.49
203.210.219.5
203.210.219.51
203.210.219.52
203.210.219.57
203.210.219.69
203.210.219.85
203.210.219.87
203.210.219.96
203.210.221.105
203.210.221.118
203.210.221.120
203.210.221.13
203.210.221.130
203.210.221.145
203.210.221.151
203.210.221.179
203.210.221.188
203.210.221.209
203.210.221.216
203.210.221.220
203.210.221.223
203.210.221.232
203.210.221.249
203.210.221.3
203.210.221.30
203.210.221.32
203.210.221.35
203.210.221.60
203.210.221.65
203.210.221.7
203.210.221.71
203.210.221.82
203.210.221.88
203.210.221.93
203.210.221.95
203.210.221.98
203.210.222.1
203.210.222.103
203.210.222.104
203.210.222.106
203.210.222.112
203.210.222.125
203.210.222.13
203.210.222.132
203.210.222.133
203.210.222.137
203.210.222.139
203.210.222.148
203.210.222.149
203.210.222.155
203.210.222.161
203.210.222.162
203.210.222.164
203.210.222.165
203.210.222.167
203.210.222.168
203.210.222.175
203.210.222.177
203.210.222.181
203.210.222.190
203.210.222.195
203.210.222.198
203.210.222.2
203.210.222.207
203.210.222.209
203.210.222.21
203.210.222.210
203.210.222.212
203.210.222.22
203.210.222.223
203.210.222.227
203.210.222.251
203.210.222.28
203.210.222.30
203.210.222.39
203.210.222.9
203.210.222.90
203.210.222.91
203.210.222.96
203.210.222.98
203.210.223.135
203.210.223.139
203.210.223.188
203.210.223.210
203.210.223.228
203.210.223.232
203.210.223.240
203.210.223.242
203.210.224.102
203.210.224.110
203.210.224.122
203.210.224.159
203.210.224.173
203.210.224.178
203.210.224.186
203.210.224.215
203.210.224.35
203.210.224.36
203.210.224.46
203.210.224.57
203.210.224.67
203.210.224.73
203.210.225.110
203.210.225.112
203.210.225.131
203.210.225.137
203.210.225.147
203.210.225.149
203.210.225.170
203.210.225.173
203.210.225.181
203.210.225.193
203.210.225.227
203.210.225.251
203.210.225.3
203.210.225.34
203.210.225.71
203.210.225.81
203.210.225.86
203.210.225.93
203.210.227.103
203.210.227.105
203.210.227.107
203.210.227.111
203.210.227.115
203.210.227.121
203.210.227.126
203.210.227.131
203.210.227.134
203.210.227.138
203.210.227.143
203.210.227.15
203.210.227.150
203.210.227.17
203.210.227.175
203.210.227.177
210.245.106.249
210.245.106.61
210.245.107.136
210.245.107.238
210.245.107.76
210.245.107.91
210.245.10.84
210.245.11.46
210.245.116.134
210.245.116.157
210.245.116.180
210.245.116.192
210.245.116.211
210.245.116.237
210.245.116.67
210.245.116.9
210.245.117.111
210.245.117.120
210.245.117.121
210.245.117.142
210.245.117.143
210.245.117.146
210.245.117.150
210.245.117.163
210.245.117.177
210.245.117.198
210.245.117.200
210.245.117.21
210.245.117.239
210.245.117.57
210.245.117.64
210.245.117.72
210.245.117.75
210.245.117.94
210.245.118.113
210.245.118.119
210.245.118.150
210.245.118.159
210.245.118.176
210.245.118.186
210.245.118.193
210.245.118.20
210.245.118.4
210.245.119.102
210.245.119.114
210.245.119.116
210.245.119.118
210.245.119.151
210.245.119.156
210.245.119.174
210.245.119.224
210.245.119.231
210.245.119.254
210.245.119.27
210.245.119.32
210.245.120.15
210.245.120.165
210.245.120.191
210.245.120.200
210.245.120.247
210.245.120.251
210.245.120.43
210.245.120.68
210.245.120.75
210.245.120.95
210.245.121.110
210.245.121.112
210.245.121.155
210.245.121.169
210.245.121.180
210.245.121.194
210.245.121.197
210.245.121.199
210.245.121.206
210.245.121.220
210.245.121.229
210.245.121.232
210.245.121.243
210.245.121.246
210.245.121.35
210.245.121.86
210.245.12.206
210.245.122.124
210.245.122.125
210.245.122.138
210.245.122.142
210.245.122.16
210.245.122.198
210.245.122.204
210.245.122.205
210.245.122.213
210.245.122.215
210.245.122.216
210.245.122.43
210.245.122.46
221.132.26.38
221.132.29.11
221.132.29.198
221.132.29.234
221.132.30.186
221.132.30.213
221.132.31.1
221.132.31.108
221.132.31.152
221.132.31.231
221.132.31.39
221.132.31.42
221.132.31.92
221.132.32.101
221.132.32.113
221.132.32.127
221.132.32.162
221.132.32.220
221.132.32.84
221.132.33.111
221.132.33.146
221.132.33.174
221.132.33.202
221.132.33.76
221.132.34.129
221.132.34.14
221.132.34.179
221.132.34.224
221.132.34.88
221.132.35.11
221.132.35.114
221.132.35.151
221.132.35.209
221.132.35.222
221.132.35.26
221.132.35.77
221.132.36.105
221.132.37.199
221.132.37.83
221.132.38.146
221.132.38.170
221.132.38.189
221.132.38.242
221.132.38.252
221.132.38.7
221.132.38.73
221.132.48.101
221.133.11.247
221.133.11.32
221.133.12.140
221.133.12.144
221.133.12.88
221.133.13.116
221.133.17.245
221.133.18.17
221.133.8.136
221.133.8.26
221.133.9.47
221.151.201.10
221.163.79.81
221.18.112.9
222.101.65.158
222.101.65.167
222.124.50.22
222.253.201.204
222.253.202.117
222.253.64.101
222.253.64.13
222.253.64.133
222.253.64.134
222.253.64.138
222.253.64.179
222.253.64.202
222.253.64.240
222.253.64.254
222.253.64.34
222.253.64.4
222.253.65.111
222.253.65.155
222.253.65.16
222.253.65.162
222.253.65.223
222.253.65.23
222.253.65.24
222.253.65.253
222.253.66.117
222.253.66.197
222.253.66.213
222.253.66.226
222.253.67.117
222.253.67.217
222.253.67.219
222.253.67.236
222.253.67.242
222.253.74.195
222.253.74.197
222.253.74.199
222.253.74.43
222.253.74.90
222.253.75.123
222.253.75.153
222.253.75.195
222.253.75.250
222.253.75.71
222.255.111.6
222.255.111.88
222.255.41.108
222.255.41.116
222.255.41.144
222.255.41.191
222.255.41.202
222.255.41.21
222.255.41.27
222.255.41.37
222.255.41.74
222.255.41.88
222.255.41.92
222.255.44.2
24.0.223.119
24.0.7.56
24.101.250.170
24.102.56.169
24.1.207.198
24.1.245.9
24.127.44.77
24.136.84.21
24.136.92.84
24.156.147.68
24.156.149.152
24.165.211.70
24.174.45.255
24.18.95.43
24.200.48.253
24.205.27.104
24.206.76.238
24.21.216.20
24.21.63.110
24.22.143.44
24.23.206.128
24.238.246.158

[LCandrea]

aaaaaaaah, ok.
and what do you mean by that?

I used:

RewriteEngine on
RewriteCond %{HTTP_USER_AGENT} ^LWP* [OR]
RewriteCond %{HTTP_USER_AGENT} ^lwp*
RewriteRule .* - [F]
which instantly blocked the phpinclude.worms.
But i haven't seen googlebot on my site in over a week which is odd .

[Marc Smith]

No - It doesn't if done correctly.

[LCandrea]

doesn anyone know if the .htaccess stuff posted (disallowing lwp and LWP)
also blocks the googlebot?

[Zachariah B]

e-collector

e-collector - Poped on my site this morn.

212.112.232.149

[Marc Smith]

You did lwp, but not LWP. There are 2 of them. I have a FreeBSD server and I have to block both. It may be the same in your case.

[SFishy]

I added this code to my .htaccess file:

SetEnvIfNoCase User-Agent ".*lwp.*" spambot=1
<Limit GET POST PUT>
Order allow,deny
deny from env=spambot
allow from all
</Limit>

...I did this last night, around 1am, and this morning these things are still floating around my server.

Do I have to stop and restart the web server to get them off?

I've also got 3 SE Spiders on at the same time. If I start and restart the web server are they going to go away too, or will they come right back?

[georgec]

This is a great thread. Thanks for the various versions of the code to block the worm. As soon as I put one in the .htaccess file, 10 minutes later, the worm was blocked entirely. I placed the file in the root html directory btw, to block the worm from the entire site. No noticable degradation in server performance as expected, but quite the contrary in fact.

[buro9]

Oh, and I think both Erwin, myself and others will say the same on this:

If you intend to put it in your httpd.conf file, make a backup first, and don't play with things that you don't know what they are. If you screw that file up, you screw up Apache, which means you've screwed your web server.

So act in fear, and be careful if you're a newbie with it. Search the web for httpd.conf and the apache manuals for editing it... do this BEFORE you break things

[buro9]

It is easy to block them. Put the code of the attachment into .htaccess

I found that didn't work when directly placed in httpd.conf.

I wanted to perform the blocking across the entire server, as I have other virtual hosts on this server, 2 of which I know to be running phpBB (patched, yes).

What I've done is modified it slightly to this:

 SetEnvIfNoCase User-Agent "^lwp.*" bad_bot
 
 <FilesMatch "\.php">
    Order Allow,Deny
    Allow from all
    Deny from env=bad_bot
 </FilesMatch>

You can place that directly into your httpd.conf file, about 3/4 of the way down... I have it just above the virtual server definitions.

Providing it isn't nested in any other directive, this will prevent ALL .php files on all virtual hosts/ domains from being served to the LWP::Simple user agent.

I preferred it this way, as whilst I am active in blocking stuff on my site I resell spare server capacity and thus have people hosting who may not be as up to date on things as myself... putting this in httpd.conf rather than .htaccess means that I can have it at the global level and enforce it on all sites.

[Erwin]

I've got it in my httpd.conf - with the rest of the spiders I block.

[lottidah]

Thank you!