hello I would like to know how to handle certain heavy hitting IP
once in a while I look at the awstats logs and find some abnormally heavy hitting IPs
for example
Code:
ip68-231-211-53.oc.oc.cox.net 81 921 82 470 52.79 Mo 10 Jan 2017 - 07:48
c-5eeaaa91-74736162.cust.telenor.se 59 983 61 441 107.82 Mo 10 Jan 2017 - 03:41
Not only the page views are abnormally high for a single individual but the page/hit ratio is also abnormal
I don't think it is a ddos attack because I have ddos protection, I assume this activity is the result of some kind of script, not sure if malicious or not
I have two questions :
1. should I ban these IP
2. is there a way to automatically detect this kind of activity and ban the offenders?