Banning ALL IP addresses from Africa

For general questions and discussions specific to the AbleCommerce 7.0 Asp.Net product.
Post Reply
User avatar
AlexG
Commander (CMDR)
Commander (CMDR)
Posts: 128
Joined: Mon Mar 03, 2008 9:51 pm
Location: StealDeals.com
Contact:

Banning ALL IP addresses from Africa

Post by AlexG » Mon Nov 03, 2008 2:23 am

I am really getting hammered by African fraud. I've stopped all international orders but they just fill in US addresses to test out their stolen credit cards.

I check the IP addresses and ban them as they come in and have tried to do ranges but I must be missing the ones they use because they just keep coming in...

But can someone give me the range of IP addresses, in the correct form, to ban ALL orders from ANYWHERE in Africa.

These scammers are driving me nuts with dozens of fraud orders a day.

I try to use http://www.ipaddressguide.com/ and http://member.dnsstuff.com/pages/toolfailure.php ( On the left side of the page there is a search box for IP Information. )

What about a tool in AC for Banning IPs??

keats76
Commander (CMDR)
Commander (CMDR)
Posts: 117
Joined: Sat Dec 15, 2007 4:45 pm

Re: Banning ALL IP addresses from Africa

Post by keats76 » Mon Nov 03, 2008 10:48 am

This feature already exists (see below).

I haven't had any problems with Africa, but I've had my fair share with China and Korea. Here is a list of my Banned IPs. Feel free to insert them into your ac_BannedIPs table in your database. These IPs were pulled from various websites as well as specific addresses with which I've had problems (including SQL injection attacks).

Note: the Security-> Banned IPs from the admin lets you enter in the typical XXX.XXX.XXX.XXX IP address, but they are stored as HEX in the database.

Since banning these IPs, I've reduced my spamming/hacking occurrences a great deal.

Enjoy.

User avatar
AlexG
Commander (CMDR)
Commander (CMDR)
Posts: 128
Joined: Mon Mar 03, 2008 9:51 pm
Location: StealDeals.com
Contact:

Re: Banning ALL IP addresses from Africa

Post by AlexG » Mon Nov 03, 2008 11:33 pm

keats76 wrote:This feature already exists (see below).

I haven't had any problems with Africa, but I've had my fair share with China and Korea. Here is a list of my Banned IPs. Feel free to insert them into your ac_BannedIPs table in your database. These IPs were pulled from various websites as well as specific addresses with which I've had problems (including SQL injection attacks).

Note: the Security-> Banned IPs from the admin lets you enter in the typical XXX.XXX.XXX.XXX IP address, but they are stored as HEX in the database.

Since banning these IPs, I've reduced my spamming/hacking occurrences a great deal.

Enjoy.
Thank you but in your file I cant find the real IPs - no dots!
From your file:

Code: Select all

932	1	1951137792	1951399935	China
And how to find out the ip?



I also has banned IPs(maybe it helps you too):
97.92.192.122 97.92.192.122 SQL Injecion
75.128.41.37 75.128.41.37 SQL Injecion
81.244.38.167 81.244.38.167 SQL Injecion
74.64.96.184 74.64.96.184 SQL Injecion
117.89.0.232 117.89.0.232 SQL Injecion
212.10.75.99 212.10.75.99 SQL Injecion
89.243.215.179 89.243.215.179 SQL Injecion
69.59.202.172 69.59.202.172 SQL Injecion
74.68.125.95 74.68.125.95 SQL Injecion
200.90.126.234 200.90.126.234 SQL Injecion
213.51.237.166 213.51.237.166 SQL Injecion
86.7.157.250 86.7.157.250 SQL Injecion
81.244.168.140 81.244.168.140 SQL Injecion
71.16.95.82 71.16.95.82 SQL Injecion
70.244.51.64 70.244.51.64 SQL Injecion
212.163.255.135 212.163.255.135 SQL Injecion
222.148.52.37 222.148.52.37 SQL Injecion
24.125.244.126 24.125.244.126 SQL Injecion
92.23.46.174 92.23.46.174 SQL Injecion
212.100.64.0 212.100.95.255 Nigeria - blocked
41.210.0.0 41.210.63.255 Ghana - blocked

keats76
Commander (CMDR)
Commander (CMDR)
Posts: 117
Joined: Sat Dec 15, 2007 4:45 pm

Re: Banning ALL IP addresses from Africa

Post by keats76 » Tue Nov 04, 2008 11:27 am

Those IPs are real :)

They're just listed in Hex. That's how they're stored in the database. I created an excel spreadsheet to do the conversions for me, then I inserted the records in the db. I'll attach another spreadsheet. This one takes the typical IP range (i.e. 0.0.0.0 to 255.255.255.255) and then converts them to their hex equivalents. This tool should make it easier for you to maintain your banned IP list.

You could then take the data from the spreadsheet and generate some insert statements for the db. Or you could enter them all in by hand, but that would be a royal pain.

Hope this helps!

Post Reply