ip address or visitors staying long on my website

Question

i am experiencing heavy CPU usage, i observe that some ip address staying long and hit count also gone above 50000 each and time on website reached 10 hours.

ip address          time    hits   page view kb     website
159.0.93.164        10h     37,420  37,413  271 KB  mydomain.co.uk/page101.php

please let me know what could be possibilities.

thanks

Answer 1

Use fail2ban - it can change your firewall to block an IP after a certain number of attempts in a given time period. If its a bot, its probably proxied, so you'll need an automated tool like fail2ban to "re-ban" after they rotate to a new IP address. Sooner or later they'll exhaust their proxy exit point IP addresses.

BTW - that IP resolves to Saudi Telecom - is that expected?