Ban ISP 1

[MarkZK]

Hi all,

I'm trying to block an ISP from a server using windows server 2003, I've notice you can block one IP at a time, but does anyone know how I can block a whole specific ISP ?, I was thinking I'd maybe have to find the ISP's IP range and then somehow apply that range to a banned list somewhere in WS2003.


any help or points in the right direction would be great, Thanks.

 

[bphlat]

Once you have IP address that is trying to hack into your server, do the following:

1.) Open up IIS

2.) Find default websites /ftp site

3.) Right click folder /Default FTP site

4.) Click properties

5.) Click "Directory Security" tab

6.) Then add IP address to list

To get to Rage of Ips on a domain , I would suggest going to dnsstuff.com and looking up the IP that you want to ban. Once you put the IP in the dnsstuff.com search bar, it will pull up all info (including ranges of domains from the IP that hacker tried to use). Then ban the IP ranges in your Directory Security tab.

Also, send an IP abuse report to the hacker's ISP, ICANN and to the Administrator of the domain (you'll get this whois: info at dnsstuff.com when you look up the domain of the IP that you're trying to ban)

Hope this works for you.

 

[MarkZK]

Hi bphlat,

Thanks for the reply, I noticed dnsstuff.com shows the country range and I don't really want to ban a country just the ISP, I've added about seven single IP addresses so far, dynamic IPs can be annoying from a server point of view, but I'll have a look at the "Directory Security" tab as you mentioned to see if I can see where to add the range.

Thanks again.