PDA

View Full Version : Man these guys are hammering me


jfrovich
16-10-2006, 22:48/10:48PM
airband-216-138-71-158.airband.net
Pages Hits Bandwidth
8906 22401 268.24 MB 16 Oct 2006 - 22:38

I blocked thier Ip
as this is all my logs say

Http Code: 200 Date: Oct 16 22:24:52 Http Version: HTTP/1.1 Size in Bytes: 20500
Referer: -
Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)

did i block them correctly

<Limit GET POST PUT>
Order allow,deny
deny from env=blocked
deny from 216.138.71.158
allow from all
</limit>

WebSavvy
16-10-2006, 22:57/10:57PM
Jason, IPs can change and still be from the same Host. You'd need to block the Host UA string -> airband.net

SetEnvIfNoCase User-agent "airband.net" bad_pass

Using it without the ^ flag will cause it to match any instance of airband.net located anywhere within the UA string (and that's what you WANT and NEED it to do! :))

WebSavvy
16-10-2006, 22:59/10:59PM
OK, you're using the other format and yes, you blocked it correctly.

Here's the code for the blocked UA string (from above)
SetEnvIfNoCase User-agent "airband.net" blocked=yes

jfrovich
16-10-2006, 23:56/11:56PM
Thanks Deb..

all these guys hammer my forum?
not sure why

SEFL
17-10-2006, 00:23/12:23AM
My guess is that Airband isn't the responsible party.

http://www.airband.net/products/internet.html

I'd say they're merely the ISP and don't know what's going on. Report it to them...they may knock the customer off.

jfrovich
17-10-2006, 00:50/12:50AM
Originally posted by SEFL
My guess is that Airband isn't the responsible party.

http://www.airband.net/products/internet.html

I'd say they're merely the ISP and don't know what's going on. Report it to them...they may knock the customer off.

done thanks