Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We've got a script kiddie plugging away at one of our websites, and while they don't seem to be causing any problems, they're flooding the logs and generally being irritating. I'm wondering if there are any modules or config settings that could help restrict.

They basically throw in a few thousand http GET requests to a particular page on our checkout, alternately on port 80 and port 443 (no idea if they're responding to the redirect for the protocol at that point). They never seem to POST anything,

The attacker requests a single page about 5-10 times per second from the same IP address. If I notice and block the IP in IIS manually, a few days later they'll try again from a different IP. The attacks only last a few minutes, tend to be seperated by a few hours, and also tend to be worst at weekends.

Anyway - my request, is there a way of configuring IIS, or a module or something I could install, that will add an IP address to the block list if it throws in too many requests in a short space of time?

share|improve this question
up vote 1 down vote accepted

There is nothing in IIS 6, but we do have Dynamic IP Restrictions in IIS 7 which is still in beta. Also read Using Dynamic IP Restrictions.

share|improve this answer
Ahh Cool, We're beginning to host newer sites on IIS7, but the majority are still on 6. But this sounds like exactly what I'm after. – Andrew M Nov 9 '10 at 11:44
If you find the reply useful please mark it as answer. Thank you – Vivek Kumbhar Nov 9 '10 at 11:46
Give it time :) Someone might yet come up with an awesome commercial or third party IIS6 compatible module. Assuming they won't, I'll come back. – Andrew M Nov 9 '10 at 11:47

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.