How to stop spammer from attacking my site?

Discussion in 'Apache' started by case101, Oct 13, 2010.

0
  1. #1
    I have a blog build with PHP/Apach/MySQL: http://www.consultingcase101.com.
    just found from log file that a spammer IP 213.5.64.20 attack my blog every 20 mins. I already blocked it from .htaccess file. Is there anyway to complete block this IP so that it won't attack my blog anymore? any suggestions??

    [Wed Oct 13 01:09:55 2010] [error] [client 213.5.64.20] client denied by server configuration:
    [Wed Oct 13 01:09:55 2010] [error] [client 213.5.64.20] client denied by server configuration:
    [Wed Oct 13 01:32:14 2010] [error] [client 213.5.64.20] client denied by server configuration:
    [Wed Oct 13 01:32:14 2010] [error] [client 213.5.64.20] client denied by server configuration:
    [Wed Oct 13 01:54:34 2010] [error] [client 213.5.64.20] client denied by server configuration:
    [Wed Oct 13 01:54:34 2010] [error] [client 213.5.64.20] client denied by server configuration:
    [Wed Oct 13 02:16:36 2010] [error] [client 213.5.64.20] client denied by server configuration:
    [Wed Oct 13 02:16:36 2010] [error] [client 213.5.64.20] client denied by server configuration:
    [Wed Oct 13 02:40:01 2010] [error] [client 213.5.64.20] client denied by server configuration:
    [Wed Oct 13 02:40:01 2010] [error] [client 213.5.64.20] client denied by server configuration:
    [Wed Oct 13 03:04:04 2010] [error] [client 213.5.64.20] client denied by server configuration:
    [Wed Oct 13 03:04:04 2010] [error] [client 213.5.64.20] client denied by server configuration:
     
    case101, Oct 13, 2010 IP
  2. case101

    case101 Peon

    Messages:
    137
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #2
    will this kind of repeated attempt to connect my site slow down my server performance?
    anybody has any idea?
     
    case101, Oct 13, 2010 IP
  3. elicitservers

    elicitservers Peon

    Messages:
    714
    Likes Received:
    7
    Best Answers:
    1
    Trophy Points:
    0
    #3
    I thought I just posted on this issue in another thread? That's merely 2 attempts per 20 minutes, it shouldn't affect your server load at all unless there is more going on behind the logs. Have you noticed an increase in load?
     
    elicitservers, Oct 13, 2010 IP
  4. knobish

    knobish Peon

    Messages:
    32
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #4
    # BLOCK China and India - send em to baidu
    ErrorDocument 403 http://www.baidu.com/
    <Limit GET HEAD POST>
    order allow,deny
    deny from 58.14.0.0/15
    allow from all
    </LIMIT>

    modify this with his ip. test it against your ip.
    Im not sure, but I think the end 0/15 means that you're blocking 58.14.0.0-15. anyways i use a huge one of these to block china and india
     
    knobish, Oct 14, 2010 IP