What a way to start Sunday off… receiving an email with subject Notification of problem domains…

Upon investigation, I found out that the traffic limit on one of my domains had been heavily exceeded. Looking at the access logs revealed that a single IP address was responsible as for the past two days, the same mix has been pulled over and over again…

So what else than blocking this IP from accessing the site? The downside is that this IP appears to be a (caching) proxy of a internet provider, so potentially more than just the responsible user is now blocked.

But until the internet provider reaches back and explains what happened, the block will stay in place.

Mike Fossati