Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ip-blocking]

The tag has no usage guidance.

0
votes
1answer
48 views

Allow/block access to a specific path with apache 2.4 failing

I have a django website project deployed in an enviroment from AWS Beanstalk. I'm trying write configs to apache block access to a specific path (/admin). I avoid change wsgi.conf file, instead I ...
0
votes
1answer
832 views

Block all traffic from googleusercontent.com IP range

I manage a dedicated server and I use IPset and APF to block country level IP's and individual offending IP's / ranges respectively. My PHP scripts report MySql injection type post and get queries (...
0
votes
1answer
43 views

How to blacklist an IP using apache2 without using .htaccess

I have aws machine on which i'm running my spring boot application. The public url of application is say "abc.com" i'm using apache2 to redirect request coming to abc.com to localhost:8080. Some web ...
1
vote
0answers
54 views

Hosting a virtual machine in Russia

One of the web-hosted projects I work on is being blocked in Russia (ostensibly due to Russia's attempt at blocking a certain messaging service.) The service must be accessible by ephemeral/mobile ...
1
vote
1answer
1k views

How to block website for all countries except US and Canada

I have a website which is only for US and Canada visitors. I don't want to make it visible to other visitors. I want to use Geo targeting solution but I have a amazon hosting it did return current ...
0
votes
0answers
56 views

Ipset/Iptables: country blocking, allowing only http/https (for web browsing /w enhanced security)

How do I block entire nations and yet allow http/https connections to them only? For enhanced security. Here are some resources I have found; https://superuser.com/questions/444000/iptables-allow-...
0
votes
1answer
785 views

Block traffic from specific IP at Azure Cloud Service

I have an Azure Cloud Service and I am getting a huge traffic from specific IP address. How can I block a traffic coming from specific IP address? Is it possible to do this w/o re-deploying the ...
0
votes
1answer
158 views

Block all RDP connection except one IP

I want to block all connection to Hyper-V machine except from one IP. I can explain my scenario. User can access RDP when they are in our company network.We are using 128.x.x.x range internally and ...
0
votes
1answer
158 views

A bot with blocked ip still causes exceptions on server

I manage a website which is being "attacked" by a very stupid bot. The bot tries the same requests all the time, it always gets a bad request response because ASP.NET detects "A potentially dangerous ...
2
votes
0answers
679 views

Blocking IP range using iptables

What would the command be to block a range of IPs to port 80? The block of IP I want to block is 123.56.x.x and 123.57.x.x. What would the correct command be? iptables -I FORWARD -p tcp --dport 80 -...
-2
votes
1answer
799 views

how to get IP address list of Social Network [closed]

I'm newbie sorry for my poor English I want block range IP of Social networks and Game server in Mikrotik router . I need IPs of below social network : Telegram Clash Of Clans Instagram i google ...
0
votes
1answer
29 views

How can I increase the number of times to block for incorrect password?

I manage a dedicated server and a VPS. The run on CentOS and I access them through SSH and DirectAdmin. These servers have a low tolerance for wrong password and I frequently block my IP out and need ...
-2
votes
1answer
527 views

How to block an Internal IP address talking to an external IP Address on Cisco ASA 5505 [closed]

I want to block my server talking to an external IP address continously. The IP address in question is I think is being hijacked or spoofed. When Used who.is it resolves to Netherlands. But if you ...
-2
votes
2answers
269 views

IPTables: Blocking specific source IP addresses [closed]

I'm trying to block a specific IP using IPTables. When I use the following shell command (Xs to hide the actually IP): iptables -A INPUT -s XXX.XXX.XXX.XXX/32 -j DROP I get the following line added ...
2
votes
1answer
250 views

iptables block IP for x hours not working?

On my Linux server, I want to ban IPs that access certain ports for 24 hours using IPtables. For this, I use the following IPtables rules: # Check if IP is on banlist, if yes then drop -A INPUT -m ...
1
vote
2answers
1k views

UFW (firewall) not blocking UDP right away

I have a PBX (phone system called Astersik) that works with udp and tcp. Sometimes I get invalid request from some IP addresses that I will like to block. I cannot block those requests until I reboot ...
0
votes
0answers
1k views

blocking subnets in iptables

I currently have a router attached to the main network (192.168.0.x). On this router, I want the ethernet-ports to link to the main network, and the vlan's (wireless) to be set up via a separate DHCP ...
0
votes
2answers
394 views

iptables - access to port 3306 timeout

I cannot connect to mysql from a remote server. I have bind-address commented out but when I add rules in iptables to block other connections the requesting server's connection times out. I tried ...
-2
votes
1answer
1k views

How Temporarily block an IP address making too many hits on the Server with iptables?

this is my first question here. I made this follow script to protect my server against Slowloris and some DDOS. #!/bin/sh # It does not allow more than 10 connections per IP on ports 80 and 443. And ...
-1
votes
0answers
81 views

Clients on one VLAN are able to access all but one IP on a separate vlan

So I am having an issue where clients on one specific subnet are able to access all servers on a separate subnet except a server with a specific IP address on another. Any other client on any other ...
1
vote
1answer
834 views

Block IP Address range on IIS 7.5

I have a Windows 2008R2 Server running IIS 7.5. It is getting bombarded with attempted hacks from similar IPs. How would I block the IP range with something like 51.255.65.*? Below is the UI ...
1
vote
1answer
1k views

How to unblock my IP after failed sftp login attempts to google cloud compute instance

We just started using google cloud compute engine, and to connect to the server using sftp a couple of colleagues did a number of failed login attempts. Now we cannot access our google cloud engine vm ...
2
votes
2answers
198 views

Blocking suspicious IPs on firewalls - still relevant?

In interest of improving security, does it make sense to block suspicious IPs on internet facing firewalls? Does anyone know of any reliable block lists? Thanks, Mark
1
vote
0answers
60 views

Nginx reverse proxy gets blocked

We run a wordpress blog in a subdirectory from our main domain. domain.com => Server A (Nginx) domain.com/blog => Server B (Apache) The blog itself lies on a different (cheap shared hosting) ...
1
vote
4answers
5k views

CentOS 7 - Blocking certain countries (Phillipines,Russia,China)

I run a site that only deals with customers in certain locations. Lately my load balancer is being hammered by requests from Phillipines/Russia/China. Mail bots, brute force attacks etc. Is there a ...
4
votes
1answer
633 views

Finding google unusual traffic

We are a small Internet provider. In order to get Internet access we are using NAT (10-20 users per one public IP). And lately we've met with Google blocking services (captcha and full block) and we ...
0
votes
1answer
2k views

How do I block an abusive IP address using a Netgear FVS338 firewall?

Our Postfix mailserver has been getting thousands of automated login attempts from a bot. The mailserver is behind a Netgear FVS338 firewall. How can I completely block inbound connections from that ...
0
votes
1answer
569 views

Block IPs for some time on HAProxy

I would like to blacklist IPs that are spamming a particular URL, but only for a determined amount of time. let's say 10 minutes. I'm thinking of creating a stick-table, and store the src IP and ...
1
vote
1answer
69 views

How to configure an nginx VHost to hang up on the client in the rudest possible way?

I have a, let's call it, "legacy" VHost configured on an nginx server. It used to be a full site, but it has since been decommissioned and all the content removed. The server block now looks something ...
-3
votes
2answers
250 views

block or log IPs that direct access my website (ubuntu , nginx)

The website is under DDOS, the cloud service is doing a pretty good job for a cost of dozen bugs a month. We are happy! However the attackers have been hitting our site with IP. Currently, we 301 ...
1
vote
2answers
185 views

dnsmasq adblocking only working server-side

I'm trying to create a server-side adblocking mechanism through dnsmasq, but I only get results on the server itself, not the computers attached to my local network. First of all, my router is the ...
0
votes
1answer
624 views

Block all traffic, except specific domians, by windows server 2008 R2 firewall

I've got a problem, which I didn't find any other way to restrict all the outbound traffic on my server. I have a web service, which is deployed on a server, alone. This is about one month that I get ...
-2
votes
2answers
747 views

Emails from my domain getting blocked at all other domains [duplicate]

Recently I tried to set up a new email server using iRedMail on Lubuntu. The mail server workes very well when email conversation is in the same domain. But when a user tries to send email to some ...
1
vote
0answers
1k views

Dynamic IP Blocking on FORTIGATE 200A Firewall

I have FORTIGATE 200A firewall protecting a IIS Server running a ASP.NET website (windows server 2008 and IIS7) I'm not familiar with Fortigate configurations and options. I recently had "attacks" ...
2
votes
1answer
13k views

How can I block traffic FROM Amazon Technologies Inc. (possible DDOS attack) [closed]

I've a small website (portfolio) and I usually notice traffic of about 10-20MB per day. But for few recent days I've noticed about 10-15GB (1000 times more) each day for 4 days now (and it continue ...
-1
votes
3answers
149 views

How do ISPs handle Customer IPs blocked by WebHost [closed]

At my ISP, we issue static IP addresses to customers. A lot of times, we get complaints from our users unable to access their websites or emails from their IPs (but same sites and mails are accessible ...
3
votes
4answers
4k views

/etc/hosts.deny ignored in Ubuntu 14.04

I have Apache2 running on Ubuntu 14.04LTS. To begin securing network access to the machine, I want to start by blocking everything, then make specific allow statements for specific subnets to browse ...
1
vote
2answers
1k views

deny from .htaccess with banned IP list from stopforumspam.com not working?

so i'm trying to use .htaccess to ban a large list (50,000) of suspicious spam IP addresses that i got from this site. the list is almost 1M in size when i add the deny from directive for each ...
7
votes
4answers
28k views

How to run node.js app on port 80? Are processes blocking my port?

I believe the port 80 on my remote instance is blocked, and I am trying to run a node.js app using port 80. I have experimented with ports 3000 and 3002, and both ports are working fine, but I get an ...
1
vote
1answer
4k views

Block all public IP addresses except those whitelisted

We have a 2008 R2 server hosted in a data centre where we have no physical access but connect to it using RDP. We plan to run SQL Server and some other services which should only be accessible to a ...
2
votes
2answers
3k views

Nginx geoipblocking & allowing LAN IPs

I'd like to block IPs with geoip except whitelisted countries AND the local area network. The first part works flawless, the second one not. Somwehere searching the internet I found the codes LH (...
2
votes
2answers
2k views

Block bots by their Java referrer or User-Agent string?

I have been getting a lot of web hits in my logs that crawl most top level pages of my site and show a referrer as a Java version. I see different variants of the Java versions in the referrer, i.e. ...
1
vote
1answer
871 views

Nginx “allow 127.0.0.1” in location block letting in all users

Problem I have the following block in my nginx config. The idea is to let the server access the file but noone else. If anyone else accesses i it should throw a 403. If I comment out the allow line ...
10
votes
2answers
11k views

Fail2ban log filled with entries saying “fail2ban.filter : WARNING Determined IP using DNS Lookup:..”

My fail2ban log at /var/log/fail2ban.log is completely filled with entries saying: fail2ban.filter : WARNING Determined IP using DNS Lookup: [IP address] I think this may have begun after I changed ...
3
votes
1answer
634 views

Fail2ban settings after changing ssh port

I switched my ssh port to 22000 and I changed the port settings in /etc/fail2ban/jail.local to specify to ban on both 22 and 22000 but when I tried failing to login 6 times, my connection was cutoff ...
0
votes
1answer
65 views

Files repeatedly downloaded form same IP - suggestions?

I have a few files that can be downloaded from my website. Every few hours all files are downloaded from the same IP address (98.137.207.97 - might be Yahoo?). How should I proceed? Should I just ...
0
votes
1answer
572 views

Automation of blocking IP address

I have an Ubuntu 12.04 machine running Apache2 which hosts about 10 wordpress websites. Recently I have been subjected to attacks from clients which seem to be sending POST requests to a wordpress ...
1
vote
2answers
646 views

Adding sleep / delay between iptables blocks in shell script

On one server, we're trying to block any access for the country China. We wish to implement this with iptables rather than via .htaccess. The problem we're experiencing though, is that when adding ...
1
vote
1answer
175 views

Does an ip catch all exist?

I'm trying to block specific ip address traffic using this: sudo iptables -A INPUT -s 192.148.10.209 -j DROP Does an ip address catch all exist where I could block all addresses on 192.148.10.* ...
7
votes
1answer
922 views

Amazon S3 appears to be blocking cloudflare IP addresses. How do I fix it?

I have static content that is being served by Cloudflare. Cloudflare points to Amazon S3 to pick up the static content and serves it via a CNAME (cdn.mydomain.com). The bucket is setup properly and ...