Skip to main content

Questions tagged [ip-blocking]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
62 views

csf -d <IP> will block an IP for a while but then it is somehow gone again from the csf.deny list some time later

I keep seeing the same attacker in my apache logs ffrom the same two IP addresses. I block both the IPs using the command csf -d <IP> Then I check the /etc/csf/csf.deny file and those two new ...
Del tree's user avatar
-1 votes
4 answers
212 views

What is the preferred way to block an IP address or range? [closed]

The website and forum I manage are constantly bombarded by spammers, crawlers and unwanted attention from countries that would have absolutely no interest in the topic of our site. I know there are ...
Gary's user avatar
  • 1
0 votes
1 answer
2k views

Best way to restrict and block countries on Apache 2.4 (By IP address or Maxmind GeoLite2-Country.mmdb)

I'm looking for a way to block certain countries to access our Apache 2.4 web server running on FreeBSD. We have brute force attacks from time to time, and they often comes from a handfull of ...
Aknot's user avatar
  • 205
0 votes
1 answer
306 views

Block an IPv6 Address where only whitelisting is available

Came across a use case where I need to block an IPv6 address from accessing a site. It is fairly simple to block an IPv4 address by skipping the specific address from the whitelist range. Does any one ...
Tom's user avatar
  • 1
1 vote
1 answer
191 views

What things should I consider when identifying and rate limiting bots?

// Not sure if this question is best fit for serverfault or webmasters stack exchange... I am thinking to rate limit access to my sites because identifying and blocking bad bots take most of my time. ...
adrianTNT's user avatar
  • 1,169
0 votes
1 answer
2k views

Modsecurity Rule that Would Block the IP After a Certain Amount of 403 Errors

I am trying to figure out how to write a ModSecurity rule that would block the IP from the server for a period of time when that IP is generating a certain amount of 403 errors, and I am struggling ...
Hojat Sajadinia's user avatar
0 votes
0 answers
172 views

Restrict access to server for TOR and VPN users

Is this possible to restrict access to all users, who try to connect to my web server using TOR or VPN? I'd like to geoblock some users and also want to avoid them accessing my website even if they ...
Geckon01's user avatar
0 votes
1 answer
418 views

Simple and secure way to display error page with IP address of visitor? With python?

Fail2ban is used to block users on certain patterns via reject command. Sometimes, especially when users are behind a NAT with a lot of users they get blocked unintendely. The user then writes an E-...
Hannes's user avatar
  • 337
0 votes
1 answer
266 views

IPs blocked automatically by my firewall are all from Cloudflare

I have a website that uses Cloudflare, in my host level firewall I have noticed that all IPs automatically detected as malicious are identified as "owned by Cloudflare" and I don't know how ...
AndreaF's user avatar
  • 225
0 votes
0 answers
97 views

Impossible to reach website from my local network

My company website is hosted on Simply Transit, running WP. It works perfectly from anywhere outside my company LAN. Inside the LAN, trying to connect to mycompany.com would result an ...
tompollon's user avatar
0 votes
1 answer
416 views

Possible to create an AWS API Gateway to Route all requests to Classic Load Balancer?

I have a questions (hopefully not dumb). I am the IT guy of a business hosting various applications with AWS and we currently have a Classic Load Balancer sitting in front of 2 to 3 EC2 instances ...
realnsleo's user avatar
  • 117
1 vote
1 answer
129 views

Managing IP blocking while managing self-hosted mail server

For privacy and long-term support reasons, I am running my own self-hosted mail server from a large hosting company. Unfortunately, using a shared hosting means that I am assigned an IPv4 address that ...
Andrei Kucharavy's user avatar
0 votes
1 answer
579 views

Nginx how to show IP blocked page?

I have a config like this for my Nginx server: server { listen 80; listen 443 ssl; ssl_certificate /etc/nginx/cert/domain.csr; ssl_certificate_key /etc/nginx/cert/domain.key; server_name ~^...
M_F's user avatar
  • 101
-1 votes
2 answers
268 views

Count requests from blocked IPs

Site on my server is being attacked using SQL injections. I block IP from which was attacked with command: # iptables -A INPUT -s ATTACK-IP-ADDRESS -j DROP Can I review activity of ATTACK-IP-ADDRESS ...
slava's user avatar
  • 161
1 vote
0 answers
1k views

ModSecurity, Create an IP Blacklist file

We have a list of IPs that we want blocked. I currently have them blocked at the firewall, I would like to create a file that ModSecurity will read, and block those IPs. This is a pretty big list, as ...
Seth's user avatar
  • 11
4 votes
1 answer
3k views

Block IPv6 addresses in my .htaccess file but I get 500 Internal Server Error?

I want to block all IP Addresses starting like this 2a01:598:xxx in my .htaccess file on my WordPress website. But everytime I edit my .htaccess file I can't visit my website anymore. I get an ...
Benjamin S's user avatar
2 votes
0 answers
187 views

Stop a user from circumventing IP block?

A user is somehow avoiding an IP block in apache 2.2/2.4, and I can not figure out how. The company I work for hosts hundreds of sites in different datacenters; this user is attacking several of the ...
suhmedoh's user avatar
0 votes
0 answers
191 views

How to scp files to a VPS whose ip was blocked without the help of jump servers?

The IP of my VPS was blocked. Sorry to mention but currently I might not have enough expense to apply to switch IP nor purchase new VPS as jump servers. Status: The VPS host itself is running ...
V. Leo's user avatar
  • 1
-7 votes
1 answer
2k views

Can I ping all AWS buckets in the world?

I have 2 questions, Can I ping all the AWS buckets in the world? I would use a simple shell script which will curl with a dictionary of names/number combinations or some other method. Will my IP be ...
ArigatoManga's user avatar
0 votes
1 answer
778 views

Allow/block access to a specific path with apache 2.4 failing

I have a django website project deployed in an enviroment from AWS Beanstalk. I'm trying write configs to apache block access to a specific path (/admin). I avoid change wsgi.conf file, instead I ...
Paulo Vinícius's user avatar
0 votes
1 answer
9k views

Block all traffic from googleusercontent.com IP range

I manage a dedicated server and I use IPset and APF to block country level IP's and individual offending IP's / ranges respectively. My PHP scripts report MySql injection type post and get queries (...
Jsp's user avatar
  • 1
0 votes
1 answer
166 views

How to blacklist an IP using apache2 without using .htaccess

I have aws machine on which i'm running my spring boot application. The public url of application is say "abc.com" i'm using apache2 to redirect request coming to abc.com to localhost:8080. Some web ...
Kumar Gaurav's user avatar
1 vote
0 answers
424 views

Hosting a virtual machine in Russia

One of the web-hosted projects I work on is being blocked in Russia (ostensibly due to Russia's attempt at blocking a certain messaging service.) The service must be accessible by ephemeral/mobile ...
Tom's user avatar
  • 3,263
4 votes
1 answer
8k views

How to block website for all countries except US and Canada

I have a website which is only for US and Canada visitors. I don't want to make it visible to other visitors. I want to use Geo targeting solution but I have a amazon hosting it did return current ...
Dileep Kumar's user avatar
-1 votes
1 answer
4k views

Block traffic from specific IP at Azure Cloud Service

I have an Azure Cloud Service and I am getting a huge traffic from specific IP address. How can I block a traffic coming from specific IP address? Is it possible to do this w/o re-deploying the ...
Kedar Rudre's user avatar
1 vote
1 answer
4k views

Block all RDP connection except one IP

I want to block all connection to Hyper-V machine except from one IP. I can explain my scenario. User can access RDP when they are in our company network.We are using 128.x.x.x range internally and ...
Nuhus 's user avatar
  • 21
0 votes
1 answer
335 views

A bot with blocked ip still causes exceptions on server

I manage a website which is being "attacked" by a very stupid bot. The bot tries the same requests all the time, it always gets a bad request response because ASP.NET detects "A potentially dangerous ...
BornToCode's user avatar
2 votes
0 answers
2k views

Blocking IP range using iptables

What would the command be to block a range of IPs to port 80? The block of IP I want to block is 123.56.x.x and 123.57.x.x. What would the correct command be? iptables -I FORWARD -p tcp --dport 80 -...
chuacw's user avatar
  • 145
-2 votes
1 answer
6k views

how to get IP address list of Social Network [closed]

I'm newbie sorry for my poor English I want block range IP of Social networks and Game server in Mikrotik router . I need IPs of below social network : Telegram Clash Of Clans Instagram i google ...
H.T's user avatar
  • 3
0 votes
1 answer
232 views

How can I increase the number of times to block for incorrect password?

I manage a dedicated server and a VPS. The run on CentOS and I access them through SSH and DirectAdmin. These servers have a low tolerance for wrong password and I frequently block my IP out and need ...
user7432810's user avatar
-2 votes
1 answer
1k views

How to block an Internal IP address talking to an external IP Address on Cisco ASA 5505 [closed]

I want to block my server talking to an external IP address continously. The IP address in question is I think is being hijacked or spoofed. When Used who.is it resolves to Netherlands. But if you ...
monketrip28's user avatar
-2 votes
2 answers
1k views

IPTables: Blocking specific source IP addresses [closed]

I'm trying to block a specific IP using IPTables. When I use the following shell command (Xs to hide the actually IP): iptables -A INPUT -s XXX.XXX.XXX.XXX/32 -j DROP I get the following line added ...
hojkoff's user avatar
  • 149
3 votes
1 answer
538 views

iptables block IP for x hours not working?

On my Linux server, I want to ban IPs that access certain ports for 24 hours using IPtables. For this, I use the following IPtables rules: # Check if IP is on banlist, if yes then drop -A INPUT -m ...
azren's user avatar
  • 131
2 votes
2 answers
7k views

UFW (firewall) not blocking UDP right away

I have a PBX (phone system called Astersik) that works with udp and tcp. Sometimes I get invalid request from some IP addresses that I will like to block. I cannot block those requests until I reboot ...
Tono Nam's user avatar
  • 322
0 votes
0 answers
3k views

blocking subnets in iptables

I currently have a router attached to the main network (192.168.0.x). On this router, I want the ethernet-ports to link to the main network, and the vlan's (wireless) to be set up via a separate DHCP ...
Tularis's user avatar
  • 101
0 votes
2 answers
2k views

iptables - access to port 3306 timeout

I cannot connect to mysql from a remote server. I have bind-address commented out but when I add rules in iptables to block other connections the requesting server's connection times out. I tried this ...
Joshua's user avatar
  • 1
-2 votes
1 answer
4k views

How Temporarily block an IP address making too many hits on the Server with iptables?

this is my first question here. I made this follow script to protect my server against Slowloris and some DDOS. #!/bin/sh # It does not allow more than 10 connections per IP on ports 80 and 443. And ...
Rodrigo Gomes's user avatar
1 vote
1 answer
2k views

Block IP Address range on IIS 7.5

I have a Windows 2008R2 Server running IIS 7.5. It is getting bombarded with attempted hacks from similar IPs. How would I block the IP range with something like 51.255.65.*? Below is the UI ...
Paul Hale's user avatar
  • 113
3 votes
2 answers
5k views

How to unblock my IP after failed sftp login attempts to google cloud compute instance

We just started using google cloud compute engine, and to connect to the server using sftp a couple of colleagues did a number of failed login attempts. Now we cannot access our google cloud engine vm ...
mister j's user avatar
2 votes
2 answers
251 views

Blocking suspicious IPs on firewalls - still relevant?

In interest of improving security, does it make sense to block suspicious IPs on internet facing firewalls? Does anyone know of any reliable block lists? Thanks, Mark
Mark's user avatar
  • 21
1 vote
2 answers
328 views

Nginx reverse proxy gets blocked

We run a wordpress blog in a subdirectory from our main domain. domain.com => Server A (Nginx) domain.com/blog => Server B (Apache) The blog itself lies on a different (cheap shared hosting) ...
David Mair Spiess's user avatar
1 vote
4 answers
10k views

CentOS 7 - Blocking certain countries (Phillipines,Russia,China)

I run a site that only deals with customers in certain locations. Lately my load balancer is being hammered by requests from Phillipines/Russia/China. Mail bots, brute force attacks etc. Is there a ...
rosey85uk's user avatar
4 votes
1 answer
849 views

Finding google unusual traffic

We are a small Internet provider. In order to get Internet access we are using NAT (10-20 users per one public IP). And lately we've met with Google blocking services (captcha and full block) and we ...
Alex's user avatar
  • 231
0 votes
1 answer
4k views

How do I block an abusive IP address using a Netgear FVS338 firewall?

Our Postfix mailserver has been getting thousands of automated login attempts from a bot. The mailserver is behind a Netgear FVS338 firewall. How can I completely block inbound connections from that ...
Matthew Lock's user avatar
0 votes
1 answer
2k views

Block IPs for some time on HAProxy

I would like to blacklist IPs that are spamming a particular URL, but only for a determined amount of time. let's say 10 minutes. I'm thinking of creating a stick-table, and store the src IP and ...
Bastien974's user avatar
  • 1,916
1 vote
1 answer
101 views

How to configure an nginx VHost to hang up on the client in the rudest possible way?

I have a, let's call it, "legacy" VHost configured on an nginx server. It used to be a full site, but it has since been decommissioned and all the content removed. The server block now looks something ...
smitelli's user avatar
  • 1,214
-3 votes
2 answers
716 views

block or log IPs that direct access my website (ubuntu , nginx)

The website is under DDOS, the cloud service is doing a pretty good job for a cost of dozen bugs a month. We are happy! However the attackers have been hitting our site with IP. Currently, we 301 ...
Phung D. An's user avatar
1 vote
2 answers
274 views

dnsmasq adblocking only working server-side

I'm trying to create a server-side adblocking mechanism through dnsmasq, but I only get results on the server itself, not the computers attached to my local network. First of all, my router is the ...
Jeez's user avatar
  • 13
0 votes
1 answer
886 views

Block all traffic, except specific domians, by windows server 2008 R2 firewall

I've got a problem, which I didn't find any other way to restrict all the outbound traffic on my server. I have a web service, which is deployed on a server, alone. This is about one month that I get ...
Behzad Nouri's user avatar
-2 votes
2 answers
1k views

Emails from my domain getting blocked at all other domains [duplicate]

Recently I tried to set up a new email server using iRedMail on Lubuntu. The mail server workes very well when email conversation is in the same domain. But when a user tries to send email to some ...
Damon's user avatar
  • 99