Go Back   AskDamageX.com Webmaster Forum > General > Webmaster Business & Traffic Main Discussion

Reply
 
LinkBack Thread Tools
Old July 3rd, 2009, 10:47 PM   #1 (permalink)
There are no words
 
EonBlue's Avatar
 
Join Date: Apr 2007
Location: Canada
Posts: 1,526
Default Block this IP

If you haven't already blocked it:

71.134.251.13

ST spam protection caught it trying to send over 4000 "clicks" through st.php on one of my sites.
EonBlue is offline   Reply With Quote
Old July 3rd, 2009, 11:37 PM   #2 (permalink)
I love AskDamageX.com
 
NoMercy's Avatar
 
Join Date: Jul 2008
Location: California
Posts: 105
Default

Looks like an AT&T DSL IP in San Jose, CA.
NoMercy is offline   Reply With Quote
Old July 4th, 2009, 12:22 AM   #3 (permalink)
Serious Contributor
 
Join Date: Dec 2006
Location: who wants me?
Posts: 734
Default

I wonder what is the fastest way to block IP on, for example, 50 domains...
__________________
POWERED BY REPLICATORS
PinkFloyd is offline   Reply With Quote
Old July 4th, 2009, 01:06 AM   #4 (permalink)
I love AskDamageX.com
 
NoMercy's Avatar
 
Join Date: Jul 2008
Location: California
Posts: 105
Default

Quote:
Originally Posted by PinkFloyd View Post
I wonder what is the fastest way to block IP on, for example, 50 domains...
If all your domains are on the same server, then you can block an IP server-wide with this...
Code:
iptables -I INPUT -s 71.134.251.13 -j DROP
Also, you can check to see how many concurrent connections are opening port 80(your webserver) with this command:
Code:
netstat -na |grep ":80" |awk '{print $5}'|cut -d: -f 1 |sort | uniq -c | sort -nk 1
Example output:
Code:
      1 0.0.0.0
      1 65.55.106.xxx
      1 67.195.37.xxx
      1 72.232.199.xxx
      1 75.23.45.xx
      1 84.31.174.xxx
      2 194.8.75.x
      2 65.13.182.xx
      3 194.126.180.xxx
      4 59.95.192.xx
    38 91.192.115.xx
(in this case "91.192.115.xx" was a Russian bot with 38 concurrent connections open... No soup for you, Comrade! [permaban] )

mod_evasive is a great Apache module for auto-banning abusive IPs as well.

Last edited by NoMercy; July 4th, 2009 at 01:07 AM. Reason: added quote
NoMercy is offline   Reply With Quote
Old July 4th, 2009, 04:44 AM   #5 (permalink)
Jack-of-all-trades
 
JACOBKELL's Avatar
 
Join Date: Dec 2006
Location: In motion
Posts: 4,560
Default

Big deal,there is tons of such ip which goes crazy on daily bases.I can send you list with tons of ip addresses which doing same.
JACOBKELL is offline   Reply With Quote
Old July 4th, 2009, 08:21 AM   #6 (permalink)
There are no words
 
EonBlue's Avatar
 
Join Date: Apr 2007
Location: Canada
Posts: 1,526
Default

Quote:
Originally Posted by JACOBKELL View Post
Big deal,there is tons of such ip which goes crazy on daily bases.I can send you list with tons of ip addresses which doing same.
Please do.

Anyways, I might not have caught this one if I didn't turn on spam protection in ST after all the talk of link spamming in the Google penalty thread.
EonBlue is offline   Reply With Quote
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On

All times are GMT -7. The time now is 07:31 AM.



Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0