Hello coders,
would you please help us with this httpd log,
we assume this spider php script is copying our forum contents in a very fast manner.
it caused us a heavy resource utilization. we banned the abuser IP & user-agnet "PHP/5.2.8"
our questions are:
what do you think this method is.
can they rebuild what they got at a database level.
Thank you all
4.68.99.xx - - [08/Sep/2009:20:15:43 +0300] "GET /forum/printthread.php?pp=100&t=52427 HTTP/1.1" 200 45623 "-" "PHP/5.2.8"
4.68.99.xx - - [08/Sep/2009:20:15:43 +0300] "GET /forum/printthread.php?pp=100&t=52428 HTTP/1.1" 200 4812 "-" "PHP/5.2.8"
4.68.99.xx - - [08/Sep/2009:20:15:43 +0300] "GET /forum/printthread.php?pp=100&t=18299 HTTP/1.1" 200 9162 "-" "PHP/5.2.8"
4.68.99.xx - - [08/Sep/2009:20:15:43 +0300] "GET /forum/printthread.php?pp=100&t=18300 HTTP/1.1" 200 19332 "-" "PHP/5.2.8"
4.68.99.xx - - [08/Sep/2009:20:15:43 +0300] "GET /forum/printthread.php?pp=100&t=52430 HTTP/1.1" 200 29166 "-" "PHP/5.2.8"
4.68.99.xx - - [08/Sep/2009:20:15:44 +0300] "GET /forum/printthread.php?pp=100&t=52431 HTTP/1.1" 200 7088 "-" "PHP/5.2.8"
4.68.99.xx - - [08/Sep/2009:20:15:44 +0300] "GET /forum/printthread.php?pp=100&t=18302 HTTP/1.1" 200 41565 "-" "PHP/5.2.8"
4.68.99.xx - - [08/Sep/2009:20:15:44 +0300] "GET /forum/printthread.php?pp=100&t=18303 HTTP/1.1" 200 6586 "-" "PHP/5.2.8"
4.68.99.xx - - [08/Sep/2009:20:15:44 +0300] "GET /forum/printthread.php?pp=100&t=52432 HTTP/1.1" 200 16547 "-" "PHP/5.2.8"
4.68.99.xx - - [08/Sep/2009:20:15:44 +0300] "GET /forum/printthread.php?pp=100&t=18304 HTTP/1.1" 200 16025 "-" "PHP/5.2.8"
4.68.99.xx - - [08/Sep/2009:20:15:44 +0300] "GET /forum/printthread.php?pp=100&t=52433 HTTP/1.1" 200 39769 "-" "PHP/5.2.8"