Security and Cryptography
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me
Go Back   Dev Shed ForumsSystem AdministrationSecurity and Cryptography

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
  #1  
Old September 4th, 2003, 07:34 PM
kolatracks kolatracks is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jul 2003
Location: UK
Posts: 311 kolatracks User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 6
Banning Hackers by country. Which IP ranges belong to which countries?

I want to ban certain countries from accessing my web pages but I would like to know where I can find out which ip's belong to which countries?
Like for instance 213.x.x.x seem to be mostly english and maybe some european country's IP's.

Reason for this being that I tired of hackers and since my website targets only the people in my country, I thought the best way to stop hackers is by blocking whole IP ranges.

I have a long list of hackers IP's and a lot of them seem to be coming from 172.x.x.x, 80.x.x.x, 81.x.x.x and 82.x.x.x.
I would just ban them now but I want make sure I'm not being too hasty and blocking users from my country. That's why I would like to know where I can find out more about these ranges or subnets or whatever they're called.

Also any other links to resources for finding out more info about the ip where the attempted hack originated, would be much appreciated.

Reply With Quote
  #2  
Old September 4th, 2003, 07:58 PM
kolatracks kolatracks is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jul 2003
Location: UK
Posts: 311 kolatracks User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 6
Just remmembered.

A way of finding out if an IP is static or dynamic would be good.

Last edited by kolatracks : September 4th, 2003 at 08:02 PM.

Reply With Quote
  #3  
Old September 5th, 2003, 07:22 AM
damonbrinkley damonbrinkley is offline
Modz
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Aug 2002
Location: NC, USA
Posts: 364 damonbrinkley User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 14 m 18 sec
Reputation Power: 7
Send a message via AIM to damonbrinkley
Although banning IPs is a way to keep certain people from accessing your site, you may want to look at the bigger picture......why is your site so vulnerable? If you have a problem with your site getting hacked then you either need to patch your server or re-evaluate the code you're using on your site.

Reply With Quote
  #4  
Old September 5th, 2003, 01:09 PM
kawika kawika is offline
Junior Member
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Oct 2002
Posts: 17 kawika User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0

Reply With Quote
  #5  
Old September 5th, 2003, 02:29 PM
Prime Mover Prime Mover is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Aug 2003
Location: Jersey
Posts: 64 Prime Mover User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 6
whois -h whois.arin.net {netblock}

i.e. whois -h whois.arin.net 212.0.0.0

Should give you some info on country of origin.

The smallest block that is delegated is I believe a /24 (1 single C class), so you shoul dbe able to search down to that level.

-Gary

Reply With Quote
  #6  
Old September 6th, 2003, 11:05 PM
infamous41md's Avatar
infamous41md infamous41md is offline
not a fan of fascism (n00b)
Dev Shed Frequenter (2500 - 2999 posts)
 
Join Date: Feb 2003
Location: ct
Posts: 2,756 infamous41md User rank is Sergeant (500 - 2000 Reputation Level)infamous41md User rank is Sergeant (500 - 2000 Reputation Level)infamous41md User rank is Sergeant (500 - 2000 Reputation Level)infamous41md User rank is Sergeant (500 - 2000 Reputation Level)infamous41md User rank is Sergeant (500 - 2000 Reputation Level) 
Time spent in forums: 2 Days 11 h 4 m 29 sec
Reputation Power: 26

Reply With Quote
  #7  
Old September 7th, 2003, 04:02 AM
kolatracks kolatracks is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jul 2003
Location: UK
Posts: 311 kolatracks User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 6
Thanks for the useful links everyone.

I've banned a whole load of of IP's and so far not even one atempted hack. At last I have some peace now. Thanks.

[damonbrinkley]
Thankfully, as far as I know, I've never been succesfully hacked, I'm just getting tired of them wasting my badwidth.

What pushed me over the edge was some a-hole who was trying, every 33 secs, for 5 days, to infect my server with a variety of trojans. Thankfully my firewall held up.


Thanks once again guys for the links.
Especially thanks to infamous41md. That's exactly what I wanted.

Last edited by kolatracks : September 7th, 2003 at 04:12 AM.

Reply With Quote
  #8  
Old November 19th, 2003, 07:44 AM
thet thet is offline
Banned
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Nov 2003
Posts: 2 thet User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
the european and american people are likely the most evil hackers/crackers! ban them.

you may use
geoIP from URL

Reply With Quote
  #9  
Old September 20th, 2004, 10:33 AM
Badguy1980 Badguy1980 is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Sep 2004
Posts: 1 Badguy1980 User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
I have red hat 9 server and I want to also block out countrys, how do I block Ip ranges? with IPCHAINS , I know theres a file I can add them To I just forgot what it was.

thanks

Reply With Quote
  #10  
Old September 23rd, 2004, 11:03 AM
RolandG RolandG is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Apr 2003
Location: New York
Posts: 140 RolandG User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 4 h 4 m 50 sec
Reputation Power: 6
Here is a good short list to "start with" if you are looking to block connections from Asia.

61.0.0.0 - 61.255.255.255
169.208.0.0 - 169.223.255.255
202.0.0.0 - 203.255.255.255
209.216.96.1 - 209.216.96.254
210.222.196.1 - 210.222.196.254
211.115.210.1 - 211.115.210.254
211.202.13.1 - 211.202.13.254
218.0.0.0 - 218.255.255.255
220.0.0.0 - 220.255.255.255
222.0.0.0 - 222.255.255.255

Reply With Quote
Reply

Viewing: Dev Shed ForumsSystem AdministrationSecurity and Cryptography > Banning Hackers by country. Which IP ranges belong to which countries?


Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump


Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 





© 2003-2008 by Developer Shed. All rights reserved. DS Cluster 5 hosted by Hostway
Stay green...Green IT