New to Access Logs need help

[emjoven]

My website has been shut down due to excessive HTTP Transfer and exceeded its bandwidth limit to 5GB in one day.

I was surprised this happened again, because I have already deleted our FORUM section thinking this might have caused the problem and changed our site header omitting the Picture Header. But still our site still exceeded its bandwith limit.

I have scanned this Forum to know what to do in detecting leeches from other URL's. I need help on how to detect those URL that are LEECHING our resources.

We really want to stay with POWWEB, please help me to how to read my ACCESS LOGS, what must I look for in the access logs to know if this URL or IP is the one that is causing our website to exceed its bandwidth limit?

Thank you in advance.

Eduardo M. Joven
webmaster

[(jj)]

In the notice that you received, you should have a description of what caused your abuse. That should give you some type of clue to the culprit.

Checking your log files for any repetitive entries, ones that are all from the same IP within seconds of each other (usually quite a number of them in a group).

If you need, post a section of your log files with what you think could be the problem. Also you can post the description from your notice. Someone can most likely point you in the right direction from these.