Ai... I keep getting log entries every few milliseconds from 81.218.152.26, which WHOIS turns up as: WHOIS results for 81.218.152.26 Generated by www.DNSstuff.com Location: Israel (high) [City: Tel Aviv, Tel Aviv] ARIN says that this IP belongs to RIPE; I'm looking it up there. Using 0 day old cached answer (or, you can get fresh results). Hiding E-mail address (you can get results with the E-mail address). % This is the RIPE Whois query server #1. % The objects are in RPSL format. % % Note: the default output of the RIPE Whois server % is changed. Your tools may need to be adjusted. See % http://www.ripe.net/db/news/abuse-proposal-20050331.html % for more details. % % Rights restricted by copyright. % See http://www.ripe.net/db/copyright.html % Information related to '81.218.130.0 - 81.218.159.255' inetnum: 81.218.130.0 - 81.218.159.255 netname: CABLES-CONNECTION descr: CABLES-CUSTOMERS-CONNECTION country: IL admin-c: YK76-RIPE tech-c: BHT2-RIPE status: ASSIGNED PA remarks: please send ABUSE complains to *****@bezeqint.net mnt-by: AS8551-MNT mnt-lower: AS8551-MNT changed: **********@bezeqint.net 20030406 source: RIPE role: BEZEQINT HOSTMASTERS TEAM address: Bezeq International address: 40 hashacham st. address: Petach Tikva 49170 Israel phone: +972 1 800800110 fax-no: +972 3 9203033 e-mail: **********@bezeqint.net admin-c: YK76-RIPE tech-c: MR916-RIPE tech-c: RD1278-RIPE nic-hdl: BHT2-RIPE remarks: Please Send Spam and Abuse ONLY to *****@bezeqint.net mnt-by: AS8551-MNT changed: **********@bezeqint.net 20030204 changed: **********@bezeqint.net 20030508 changed: **********@bezeqint.net 20050405 source: RIPE person: Yuval Keinan address: Bezeq International address: 40 hashacham st. address: Petach Tikva 49170 Israel phone: +972 1 800800110 fax-no: +972 3 9203033 remarks: Please Send Spam and Abuse ONLY to *****@bezeqint.net e-mail: **********@bezeqint.net mnt-by: AS8551-MNT nic-hdl: YK76-RIPE changed: **********@bezeqint.net 20030204 changed: **********@bezeqint.net 20030508 source: RIPE % Information related to '81.218.128.0/19AS8551' route: 81.218.128.0/19 descr: BEZEQINT-CABLES origin: AS8551 notify: **********@bezeqint.net mnt-by: AS8551-MNT changed: **********@bezeqint.net 20030119 source: RIPE This guy keeps hammering me - how do I stop him? I thought he was refer spam, but there are no referrals on his log entries!
Add this line to your .htaccess file assuming you have one. deny from 81.218.152.26 There is some way to deny that whole range of IPs I believe it is deny from 81.218 but am not sure. Shannon
If they are determined they may well hit you with another IP in their range so you may have to be watchful. Wonder what they were up to. Shannon