look in your logs, see what proxies (if any) he's using. add the following to your .htaccess
order allow,deny
deny from 127.0.0.1
deny from 127.0.0.2
deny from 127.0.0.3
allow from all
obviously dont use those IP's, but replace them with the IP's attacking you, you can also enter domains
|