AbleCommerce Shopping Cart Software

I am really getting hammered by African fraud. I've stopped all international orders but they just fill in US addresses to test out their stolen credit cards.

I check the IP addresses and ban them as they come in and have tried to do ranges but I must be missing the ones they use because they just keep coming in...

But can someone give me the range of IP addresses, in the correct form, to ban ALL orders from ANYWHERE in Africa.

These scammers are driving me nuts with dozens of fraud orders a day.

I try to use http://www.ipaddressguide.com/ and http://member.dnsstuff.com/pages/toolfailure.php ( On the left side of the page there is a search box for IP Information. )

What about a tool in AC for Banning IPs??

This feature already exists (see below).

I haven't had any problems with Africa, but I've had my fair share with China and Korea. Here is a list of my Banned IPs. Feel free to insert them into your ac_BannedIPs table in your database. These IPs were pulled from various websites as well as specific addresses with which I've had problems (including SQL injection attacks).

Note: the Security-> Banned IPs from the admin lets you enter in the typical XXX.XXX.XXX.XXX IP address, but they are stored as HEX in the database.

Since banning these IPs, I've reduced my spamming/hacking occurrences a great deal.

Enjoy.

keats76 wrote:This feature already exists (see below).

I haven't had any problems with Africa, but I've had my fair share with China and Korea. Here is a list of my Banned IPs. Feel free to insert them into your ac_BannedIPs table in your database. These IPs were pulled from various websites as well as specific addresses with which I've had problems (including SQL injection attacks).

Note: the Security-> Banned IPs from the admin lets you enter in the typical XXX.XXX.XXX.XXX IP address, but they are stored as HEX in the database.

Since banning these IPs, I've reduced my spamming/hacking occurrences a great deal.

Enjoy.

Thank you but in your file I cant find the real IPs - no dots!
From your file: And how to find out the ip?



I also has banned IPs(maybe it helps you too):
97.92.192.122 97.92.192.122 SQL Injecion
75.128.41.37 75.128.41.37 SQL Injecion
81.244.38.167 81.244.38.167 SQL Injecion
74.64.96.184 74.64.96.184 SQL Injecion
117.89.0.232 117.89.0.232 SQL Injecion
212.10.75.99 212.10.75.99 SQL Injecion
89.243.215.179 89.243.215.179 SQL Injecion
69.59.202.172 69.59.202.172 SQL Injecion
74.68.125.95 74.68.125.95 SQL Injecion
200.90.126.234 200.90.126.234 SQL Injecion
213.51.237.166 213.51.237.166 SQL Injecion
86.7.157.250 86.7.157.250 SQL Injecion
81.244.168.140 81.244.168.140 SQL Injecion
71.16.95.82 71.16.95.82 SQL Injecion
70.244.51.64 70.244.51.64 SQL Injecion
212.163.255.135 212.163.255.135 SQL Injecion
222.148.52.37 222.148.52.37 SQL Injecion
24.125.244.126 24.125.244.126 SQL Injecion
92.23.46.174 92.23.46.174 SQL Injecion
212.100.64.0 212.100.95.255 Nigeria - blocked
41.210.0.0 41.210.63.255 Ghana - blocked

Those IPs are real

They're just listed in Hex. That's how they're stored in the database. I created an excel spreadsheet to do the conversions for me, then I inserted the records in the db. I'll attach another spreadsheet. This one takes the typical IP range (i.e. 0.0.0.0 to 255.255.255.255) and then converts them to their hex equivalents. This tool should make it easier for you to maintain your banned IP list.

You could then take the data from the spreadsheet and generate some insert statements for the db. Or you could enter them all in by hand, but that would be a royal pain.

Hope this helps!