Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [ip-banning]

11 questions
7
votes
1 answer

Windows Firewall IP ban?

OK, question: I have a IIS webserver and Windows firewall. To allow incoming connections to IIS, I enabled port 80 and 8080. But now, how can I block a specific IP address/range on port 80 (=ban) with windows firewall ?
Quandary
  • 974
  • 4
  • 18
  • 34
3
votes
3 answers

The right way to auto block ip's

The problem: I manage a website which has lot's of dynamically generated pages. Every day bots from Google, Yahoo and other search engines download like 100K+ of pages. And sometimes i have problems with "hackers" trying to massively download the…
Termos
  • 215
  • 2
  • 8
1
vote
1 answer

What is idea of web server attack on thinker/js/think.js?

My web server is getting a lot of GET request on thinker/js/think.js and thinker/showSimilarInfo.do. These requests obviously constitute a server attacks. What is point of these attacks? Also, is there a way to automatically ban IP which is…
user84686
  • 271
  • 2
  • 3
  • 7
1
vote
2 answers

Automatically block IP in apache2 - it is possible?

Is there are a way to automatically block IPs with apache2. For example, if we get a lot requests (100s) for non-existing pages (or known patterns, like CHANGE_LIST.txt, etc.) to block that IP and add it to deny list.
user84686
  • 271
  • 2
  • 3
  • 7
1
vote
1 answer

Apache: Prevent .htaccess banned IP from recording errors in logs

On my Apache-hosted Ruby on Rails website, an IP address (always identical) from Russia was hammering the website every twenty minutes, based on the path requests I think it's trying to seek out comment forms to submit spam comments onto. Anyway, I…
Shannon
  • 113
  • 2
1
vote
2 answers

IPTables not blocking an IP address

I am having a problem with comment spammers. Well at least I think I am. I am running CentOS and my Apache webserver keeps maxing out on RAM and then becomes unresponsive and crashes. If I run the following command: netstat -anp |grep 'tcp\|udp' |…
Michael Gaylord
  • 123
  • 1
  • 6
0
votes
2 answers

IP range ban : At what level of subnet is there a risk of blocking legitimate traffic?

I want to automatically block IP that scanning my server (detected with portsentry) where several website are. I don't know which level to choose to ban ip ranges. / 24, / 16 other? From what level is there a risk of false positives (legitimate…
user2267379
  • 205
  • 2
  • 8
0
votes
1 answer

Banning IP on 404 requests using fail2ban not working

Server: Ubuntu 16.04/Nginx Scenario: I'm trying to ban IP's based on multiple 404 requests on my server. I've created a filter in /etc/fail2ban/filter.d/banbadrequest.conf [definition] failregex = ^ - .* "(GET|POST|HEAD).*HTTP.*" 404…
Axel
  • 323
  • 1
  • 6
  • 17
0
votes
4 answers

Temporarily banning IPs for accessing certain ports

One of my server logs showed there was an unauthorized access attempt on a daemon listening on a non-standard port. That led me to wonder how often people run port scanners to look for vulnerabilities. Is there a program I can run as a honeypot to…
Lin
  • 2,869
  • 6
  • 26
  • 25
0
votes
3 answers

How to check my website is working in saudi arabia?

One of my client website was not opening in saudi arabia but it was working in us,uk,india and many more places. He was tried to open from different sources like office,pc,laptop,browsing cafe,mobile and so on but the website was not opening. IP…
Ramkumar M
  • 125
  • 1
  • 5
0
votes
0 answers

WAF(modsecurity) / Plesk IP Banned, is it Googlebot? Is it a false positive? Is it a malicious IP?

I was alerted by my Plesk server that an IP Address had been banned. Normally I don't check banned IPs, but this one happened to coincide with our site going down for 1 minute at the same time. Banned the following ip addresses on Mon Jul 27…
Maurice
  • 141
  • 1
  • 4