Blocking fraudulent IP ranges

BarefootSoul83 · 2011-12-09 13:43:55

I have some unwanted traffic hitting my server. (Windows 2000)
I have started making IP Sec rules, but I still see the most frequent hacker trolling my site for hours at a time, changing ISPs and IP addresses.
He is doing all of this from an Opera smart phone....

I just wanted to see if I'm missing something really...I have taken a few IPs and blocked the whole DNS, the specific IP etc and yet I still see him able to access my site from those IPs.

This is the most frequent IP: 41.206.15.18

if it were you, how would you go about blocking him?

I am having trouble figuring out the subnet for this IP.. and server 2000 only lets you block either a dns, subnet or IP.... so unfortunately I cant enter his whole IP range...

I would really appreciate some help...I realize my problem is most likely a lack of knowledge.....or some dumb error.

None the less I need some input.... I am not against blocking the whole country in this instance as 99% of my fraud comes from there..

Thanks!

graysky · 2011-12-09 14:00:50

Are you asking for support on linux or windows? If it's the latter I'm going to guess someone will close this thread... if it's linux, use iptables or a nice frontend like pgl-cli in the AUR.

Last edited by graysky (2011-12-09 14:04:22)

ewaller · 2011-12-09 14:19:51

This is not the appropriate venue for Windows support.
You probably should consider your use of Windows 2000 in a web facing role. It was probably the best OS Microsoft ever created, but its days have past and is no longer bolstered against vulnerabilities.

Closing

Arch Linux

#1 2011-12-09 13:43:55

Blocking fraudulent IP ranges

#2 2011-12-09 14:00:50

Re: Blocking fraudulent IP ranges

#3 2011-12-09 14:19:51

Re: Blocking fraudulent IP ranges

Board footer