Spammers eating BW - best way to ban IPs?

[ket]

Hey all

So, basically I'm hosting a site for a friend and there are spammers eating up my BW by using the forms that are on his site (he has a form for emails).

I've looked in the stats and searched for the IPs that consumed the most BW, searched in google for more information and it seems like the IPs are already blacklisted from other sites - see wikipedia (http://en.wikipedia.org/wiki/User_talk:62.197.126.10) for example.

What's the best way to block these IPs or prevent this from happening? They are eating the BW as I'm writing! :crash:

Some of the spammer IPs if you're interested:

200.58.160.148
65.19.150.196
202.88.129.254
200.58.161.148
62.197.126.10
200.122.153.2
212.138.47.14
200.122.153.10
212.138.113.13
68.87.71.180
68.87.71.183
212.138.47.21
68.87.72.168
212.138.47.23
68.87.71.185
200.122.153.250
68.87.71.181
212.138.47.24
68.87.72.165
212.138.47.29
68.87.72.167
68.87.71.184
212.138.47.17
68.87.72.164
212.138.113.16

Don't think it's illegal to post the ips, because spammers should die with a stick stuck down their a**.

I also posted this at SP, this is just a test to see which forum gives the better answer :yawnb:

PS - they're using proxies, or so it seems.

[dc dalton]

BEst way I know to keep these dirtballs out is to use htaccess and set it up to deny them access to the site.. (provided you are using Apache)

In a .htaccess file add this:

order deny,allow
deny from [ip address of spammer]

You can add as many as you want and any time they try to access the file they will get a forbidden error ...... no more bandwidth theft!

[moonshield]

Bandwidth theft? Do you ever use all your bandwidth? I use only like 5% of it myself (1500 GB). lol


Banning IPs is sort of dangerous though, I think AOL uses only a few IPs for all its million of customers.

[ket]

BEst way I know to keep these dirtballs out is to use htaccess and set it up to deny them access to the site.. (provided you are using Apache)

In a .htaccess file add this:

order deny,allow
deny from [ip address of spammer]

You can add as many as you want and any time they try to access the file they will get a forbidden error ...... no more bandwidth theft!

Thanks for the reply. What's the difference betwen using the .htaccess method, and using the 'IP Deny Manager' feature in cpanel?

moonshield, they are just spamming and wasting BW :(

[Chris]

Nothing, cpanel just generates an .htaccess file for you.

The truly best way is to block them with firewall software installed on your server. But unless you have a dedicated server this will not be an option for you, so use .htaccess.

[ket]

OK, thanks for the info Chris. I don't have a dedicated server, so .htaccess is what I'm going to use.

[ramprage]

If your host is using mod_security they can block form injections to stop all the spammers outright. Most bots scan for vulnerable contact forms for BCC injections, once found they come back in groves and mass mail out spam through your site.