Message Board

Tracking Harvesters/Spammers

Attack attempt

Author: L.George (1 Apr 13 10:25pm)

(First things first: I am a real noob. Yeah.)
A repeated attack attempt (for admin access) on my website was carried out from IP 187.45.180.117. The Whois gives me a CIDR IP. How can I find the IP range? I would at least like to block this IP range from site access.
Thanks for the help.

Re: Attack attempt

Author: N.Tanzil (9 Sep 13 6:23pm)

Re: Attack attempt

Author: T.Zickell (24 Dec 13 1:06pm)

Use Sucuri cloud proxy firewall the price is the best and more power and many others services costing A lot more

Re: Attack attempt

Author: H.ServerUpper (24 Dec 13 9:42pm)

For finding IP ranges I really like Domain Tools. If you create an account you get to look up more IPs. You are limited to something like 10-15 without one. I have noticed on very rare occassions that their data may be off. They may have the wrong country but like I said it's very rare.

If I feel I have to double check something I either go to whois.org or Network Solutions (www.netsol.com).

Domain Tools is my favorite though.
http://whois.domaintools.com

The IP location for 187.45.180.117 is Brazil Sao Paulo Hostdime.com.br Data Center
owner: HostDime.com.br Data Center
They have 5 websites Here are 4: (aventureiraswap.tk berimbauwap.tk familywap.tk galerawap.tk)
IP range 187.45.176.0/20

There are some bad players from Brazil hitting my server. Blocking a lot of them.

Edit: almost didn't catch that. You don't need the CIDR but the range. You can convert it here: http://cidrcalculator.com/ipv4/cidr-to-ip-range/?cy=USD
187.45.176.0 - 187.45.191.255

Post Edited (24 Dec 13 9:48pm)

Re: Attack attempt

Author: L.George (3 Jun 14 12:03am)

Hi ServerUpper,
I had the good sense to check back here again. Thanks a lot. The range link was really helpful.