IP Addresses to Block

[Mort-lemur]

I have IP Trap installed and a few other goodies, but nowhere on the forum could I find a list of known IP addresses to Block via cpanel or add to an IP trap.

 

How about pinning this post so that community members can post IPs of people trying to hack their sites and allow others to add them without having to trawl lots of didderent threads.

 

Thanks

[Guest]

Hi Heather,

 

Unless something unusual comes up and I have to add a specific IP address, the only addresses I normally include on my deny list are those of proxy servers. I KNOW some of you are going to say denying proxy servers is a bad idea, however I find in doing so I eliminate 99% of the hackers and scammers.

 

 

You can find a list at:

 

http://www.publicproxyservers.com/proxy/list1.html

 

 

There are other sites as well that maintain current listings.

 

 

 

Chris

[filmcell]

how did u block them ?

 

Im getting problems with hackers just now.

 

Grrrrrr

[Mort-lemur]

Hi,

 

I use the IP Trap contribution by Fimble get it here

 

Also you can globally block IPs from The Host Control Panel.

 

Hope this helps

 

Send me a pm and Ill give you another tip re the IP Trap

[germ]

Make no mistake here.

 

Like Chris said, "Unless something unusual comes up" blocking IP addresses isn't a reliable way to prevent much of anything.

 

If you have a vulnerability somewhere you need to find it and fix it.

 

Blocking a specific IP address may provide temporary immediate relief but either the same hacker will be back with a different IP or a new hacker with an IP you don't have blocked yet will appear.

 

Please keep this in mind when blocking IP addresses.

:thumbsup:

[Mort-lemur]

Thanks Jim,

 

Agree completely but Every little helps or so they say.

 

I use the IP trap along with all the other suggested things in the thread started by Spooks. Hopefully together they will make it more difficult to hack my site ??

 

Thanks

[Mort-lemur]

Hi Again,

 

Ip Trap just blocked the following IP from my site 99.21.236.245

 

Looking at where this had tried to go via cpanel, it had been trying all different connotations of admin & phpmyadmin and sql etc.

 

Thanks

[Mort-lemur]

And another one trying to get to phpmyadmin and sql files - blocked by IP trap

 

207.71.19.130

 

am I right in thinking these are some sort of sql inject attempt ? as they keep trying to "crawl" phpmyadmin and various "obvious" name changes of admin and sql.

 

Thanks