How to block an IP from my webserver

Matrix · Post by **Matrix** » Sun Dec 19, 2004 8:33 pm

I run a webserver on one of my home machines

Using Apache / Win XP pro / Linksys BEFSR41 router

My problem is I have this 1 IP hammering my server every day. The guy loads the same page over and over again every day, maybe a couple hundred/thousand of times per day.
He's requesting files that are not even hosted on the server anymore, I blocked his IP in the Apache config file so all he gets is 404s, but my server still has to respond to him sending him denied requests.
He's been doing this since early November.
The IP is 65.54.188.146
If u look it up on http://www.arin.net/ itâ??s an MS IP
E-mailing abuse@microsoft.com worth a shot or waste of time?

Does anyone know of a better way then using a 3rd party software firewall to block this guy from my machine, I want to make it so my server or connect doesnâ??t have to send any type of response back to him using my upload.
If not, anyone know of any decent freeware software firewalls?

CDN_Merlin · Post by **CDN_Merlin** » Sun Dec 19, 2004 8:35 pm

send the log to your ISP and they will block him at the routers.

Matrix · Post by **Matrix** » Sun Dec 19, 2004 8:47 pm

My ISP is anal about running servers, against the TOS
If I told them the problem they wouldnt even care about the guy hammering my connect they'd just be "OMG UR RUNNING A SERVER U WILL DISTROY THE ENTIRE NODE FOR EVERYONE IN UR AREA U MUST STOP NOW OR DIE" ,,, something like that
They even block ports 80, 8080 and some other popular outgoing ports used for servers

even tho my server uses like zero bandwidth they wont care

I would of switched ISPs along time ago but all thats ave to me is 768/256 verison DSL

I could just say that the guy is filling the logs on my router I guess, I'll give it a shot

CDN_Merlin · Post by **CDN_Merlin** » Sun Dec 19, 2004 9:04 pm

Other than that, the packets will still come to your router/firewall so your connect will still get hammered.

Try reporting him to HIS ISP.

DCrazy · Post by **DCrazy** » Sun Dec 19, 2004 9:10 pm

Just so you know, that's "msnbot.microsoft.com", the MSN webcrawler. (Open up a command prompt and do "nslookup 65.54.188.146" if you don't believe me.) It's trying to index your site. You could use a robots.txt file to tell it to buzz off.

Matrix · Post by **Matrix** » Sun Dec 19, 2004 9:47 pm

aye thanks DC, I just stuck a robots.txt on my server
hopefully it'll piss off soon =)

thanks

MD-2389 · Post by **MD-2389** » Sun Dec 19, 2004 11:25 pm

Just be aware that while you use the robots.txt trick, a certain google search string will allow people to see what exactly you don't want search engines to index.

DCrazy · Post by **DCrazy** » Mon Dec 20, 2004 9:52 am

I think his primary concern at the moment is getting the MSN bot to stop repeatedly trying to access his site.

Krom · Post by **Krom** » Mon Dec 20, 2004 10:19 am

Correct.

Matrix · Post by **Matrix** » Mon Dec 20, 2004 11:57 am

I havnt seen the bot hit my server sence 5min after i stuck the robots.txt on the server

ty