# I'm suffering DDOS attack on my site what Iinity can do to block the attack ips?

**URL:** <https://forum.infinityfree.com/t/im-suffering-ddos-attack-on-my-site-what-iinity-can-do-to-block-the-attack-ips/67983>\
**Category:** Hosting Support\
**Created:** [November 4, 2022, 3:45pm UTC](https://forum.infinityfree.com/t/im-suffering-ddos-attack-on-my-site-what-iinity-can-do-to-block-the-attack-ips/67983 "2022-11-04T15:45:52Z")\
**Posts on this page:** 1\
**Showing post:** 18

<div class="post-metadata">

**Author:** ![Oxy](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/oxy/32/37989_2.png) [@Oxy](https://forum.infinityfree.com/u/Oxy)\
**Post date:** [November 6, 2022, 2:38pm UTC](https://forum.infinityfree.com/t/im-suffering-ddos-attack-on-my-site-what-iinity-can-do-to-block-the-attack-ips/67983/18 "2022-11-06T14:38:35Z")

</div>

> [@anon98357128](#):
>
> With some .htaccess “tricks”

> [@Is there a way to block an IP address without taking hits?](https://forum.infinityfree.com/t/is-there-a-way-to-block-an-ip-address-without-taking-hits/7689/2):
>
> Unfortunately, there is no way to block an IP address without hitting a server. The only thing you can hope for is that the spammer will see that the requests are not getting through and stop hammering your website. But the IP address needs to hit your website first before it can be blocked. If you have your own domain name, you could also choose to use Cloudflare on your domain. That way, the request can be stopped by Cloudflare and doesn’t hit your hosting account.

> [@anon98357128](#):
>
> Why isn’t it done upfront at the server level ? to avoid the bots to reach the sites and decrease the load on the server ?

> [@Why do I see ?i=1 at the end of a URL](https://forum.infinityfree.com/t/49356):
>
> Don’t worry, this is normal! When you visit your website, you might notice ?i=1 added to the end of your URL. Here’s what’s happening and why. What is the ?i=1 suffix? The ?i=1 is a security check that protects your website from bots and malicious traffic. Our system needs to verify you’re using a real web browser before letting you access your site. Why does it appear? When you first visit your website, our security system: Sends a small test to your browser Checks if your browser can store…

And bonus

> [@10000 forum users celebration - special event](https://forum.infinityfree.com/t/10000-forum-users-celebration-special-event/22673/6926):
>
> We internally are now using a herd defined blocklist of bad actor ip addresses on free and premo hosting ( free took the update today) which includes over 800K ip addreses that have been ‘naughty’ over the network

---

_[View the full topic](https://forum.infinityfree.com/t/im-suffering-ddos-attack-on-my-site-what-iinity-can-do-to-block-the-attack-ips/67983)._