There is a very effective quick& dirty solution to stop an attack on the webserver, if the attack does not run too long.
Simply create a .htaccess file to setup password protection for your site. Give it an easy user/pass to login, and you can even mention the password in the login prompt. Regular users will get the login prompt, and can even read the password they need to enter, but a bot used for the attack can not get passed this login. Once the attack is over you can remove the login again.
|