Results 1 to 7 of 7

Thread: blocking a country's or ISP's IP address

  1. #1
    Join Date
    Apr 2008
    Location
    AZ
    Beans
    2,070
    Distro
    Ubuntu

    blocking a country's or ISP's IP address

    last week my shopping cart started getting fraudulent credit card orders. the bill to & ship to addresses are always in the US, however the credit card numbers are always different. looks like this hacker always comes to my website from www.google.com.ng so far the IP addresses I've blocked are:

    41.219.200.245
    41.219.225.108
    41.219.230.209

    See the common pattern? Should I just block 41.219.*.* ? How can I see what countries or ISPs it will affect? according to http://www.ip-adress.com/ip_tracer/ all of those IPs belong to Starcomms Nigeria.
    Is it possible to block the entire country of Nigeria? Or just that particular ISP? Please advise.

  2. #2
    Join Date
    Aug 2008
    Location
    Brazil
    Beans
    12,497
    Distro
    Ubuntu Studio 12.04 Precise Pangolin

    Re: blocking a country's or ISP's IP address

    Use moblock with a country ip list.

  3. #3
    Soul-Sing is offline Chocolate-Covered Ubuntu Beans
    Join Date
    Aug 2006
    Beans
    1,374
    Distro
    Ubuntu 13.04 Raring Ringtail

    Re: blocking a country's or ISP's IP address

    : http://iplist.sourceforge.net/start.html
    iplist blocks ip-ranges and countries.

  4. #4
    Join Date
    Jun 2008
    Location
    Colombia
    Beans
    443

    Re: blocking a country's or ISP's IP address

    I'd suggest taking a different approach than blocking all of those IPs. If the stuff is being mailed to the US then it's very likely the attacker is just using proxy servers, and if that country is banned, he'll move on to the next one.

  5. #5
    Join Date
    Apr 2008
    Location
    AZ
    Beans
    2,070
    Distro
    Ubuntu

    Re: blocking a country's or ISP's IP address

    I would be happy to block anonymous proxy servers as well.

  6. #6
    Join Date
    Aug 2008
    Location
    Brazil
    Beans
    12,497
    Distro
    Ubuntu Studio 12.04 Precise Pangolin

    Re: blocking a country's or ISP's IP address

    Quote Originally Posted by nhasian View Post
    I would be happy to block anonymous proxy servers as well.
    http://iblocklist.com/list.php?list=bt_proxy

    Other lists http://iblocklist.com/lists.php

  7. #7
    Join Date
    Sep 2006
    Beans
    8,627
    Distro
    Ubuntu 14.04 Trusty Tahr

    Re: blocking a country's or ISP's IP address

    Quote Originally Posted by nhasian View Post
    last week my shopping cart started getting fraudulent credit card orders. the bill to & ship to addresses are always in the US, however the credit card numbers are always different. looks like this hacker always comes to my website from www.google.com.ng so far the IP addresses I've blocked are:

    41.219.200.245
    41.219.225.108
    41.219.230.209

    See the common pattern?
    You can block the range. Find the range with whois

    $ whois 41.219.200.245;
    ...
    inetnum: 41.219.225.0 - 41.219.225.255
    ...


    There's a contact there to lodge a complaint with.

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •