Ravens PHP Scripts: Forums
 

 

View next topic
View previous topic
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> Security - PHP Nuke
Author Message
Serafim
Worker
Worker


Joined: Mar 25, 2006
Posts: 109
Location: Delaware Usa

PostPosted: Sun Apr 02, 2006 7:04 pm Reply with quote

I was checking my server logs in cpanel and I got this ip addy that is into everything The addy is 81.215.10.100 I checked My tracked ip's in sentinel and it shows as a Turkish range. Problem is I blocked all those ranges or so I thought.. I checked the ip and its listed to some telecom thing any ideas what this is.. I have them blocked for now..

_________________
Image 
View user's profile Send private message Send e-mail Visit poster's website MSN Messenger
hitwalker
Sells PC To Pay For Divorce


Joined:
Posts: 5661

PostPosted: Sun Apr 02, 2006 7:20 pm Reply with quote

well Serafim ,nice choice...keep it blocked..
turkish hacking group is making overtime lately...
just keep whole country blocked..
 
View user's profile Send private message
kguske
Site Admin


Joined: Jun 04, 2004
Posts: 6383

PostPosted: Sun Apr 02, 2006 7:21 pm Reply with quote

Pretty common, that is. Quite a few attacks appear to be launched from that company / range. Unless you block them at the server level (i.e. via htaccess), they can still attack and appear in your logs. But, even if they attempt to view a legitimate page, they'll see the block page.

_________________
I google, therefore I exist...
Only registered users can see links on this board! Get registered or login!
 
View user's profile Send private message
kguske
PostPosted: Sun Apr 02, 2006 7:22 pm Reply with quote

It could also be the IP address of an anonymous proxy - used to disguise the attackers true IP address. Still, if it can be used to launch attacks, it's good to block it.
 
Serafim
PostPosted: Sun Apr 02, 2006 7:27 pm Reply with quote

Well I thought i blocked the entire range can someone link me to the tut on how to block the entire range and I added then manually to .htaccess whan I blocked them
 
hitwalker
PostPosted: Sun Apr 02, 2006 7:36 pm Reply with quote

you mean how to block whole range in htaccess or sentinel?
 
kguske
PostPosted: Sun Apr 02, 2006 7:37 pm Reply with quote

Did you have htaccess updates turned on when you blocked the range?
 
Serafim
PostPosted: Sun Apr 02, 2006 7:37 pm Reply with quote

Sentinel Like I said I thought when I did the ip2 county import that was all I needed to do.. See newbie assumptions lol
 
hitwalker
PostPosted: Sun Apr 02, 2006 7:42 pm Reply with quote

ok ,

first go to sentinel administration.
then click on Blocked Range Menu
Then (menu right) on Add Blocked Range
Then you see the areas where you can add the ip's ..
 
Serafim
PostPosted: Sun Apr 02, 2006 7:51 pm Reply with quote

Ok I did like you suggested.. I also imported to blocked Range Turkey.. Viewed the ranges in display and they appear to be there.. There are 214 pages total in my blocked ranges.. Quiet a few I think.. What I believe may have happened here was I didn't add that range before I restored my site from back up.. I do that religiously to test that the backup works correctly.. Thanks for all your guidance..
 
Serafim
PostPosted: Sun Apr 02, 2006 8:41 pm Reply with quote

One more thing now that I have added all those ranges lets say that I added some poor country like The bahamas do you have to manually delete each of those ranges or is there a better way...
 
hitwalker
PostPosted: Mon Apr 03, 2006 3:59 am Reply with quote

well i never had such a situation,but in these cases when that happens i just act on any mails i get.
people start to mail you that they cant visit your site because of the block.
if that happens i ask for their ip and then i take out their range.
 
Display posts from previous:       
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> Security - PHP Nuke

View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001-2007 phpBB Group
All times are GMT - 6 Hours
 
Forums ©