Urgent HELP: possible attack??

I've noticed that this a certain IP opened over 100 HTTP constant connections to the server. It seems that he/she is crawling every page of the forum, been going on for almost half an hour.

I tried banning that IP through APF but the connections from the same IP keep coming in. Why is that?

I typed:

apf -d ipaddress
apf -r
apf -f

I even restarted Iptables but to no avail. Urgent HELP: possible attack??

 

 

 

 

Top