oracle765 Posted March 19, 2016 Share Posted March 19, 2016 ## BAN USER BY IP <Limit GET POST> order allow,deny deny from 101.184.5.172 deny from 216.126.45. deny from 54.236.1. allow from all </Limit> Hi All The last few days I have been receiving multiple visits from Ashburn Virginia and the IPs are changing but always in the format 54.236.1.whatever How do I stop this, I have tried the following in htaccess but it keeps coming Quote Link to comment Share on other sites More sharing options...
requinix Posted March 19, 2016 Share Posted March 19, 2016 Why stop it? Is there a problem? Traffic from Amazon (AWS) could be VPN servers or proxies that people need to use. Quote Link to comment Share on other sites More sharing options...
oracle765 Posted March 20, 2016 Author Share Posted March 20, 2016 ah ok I didn't know that, I thought it was a spam bot or something Quote Link to comment Share on other sites More sharing options...
requinix Posted March 20, 2016 Share Posted March 20, 2016 It's could be... Look at the traffic in detail to tell what they're doing. But blacklisting an entire IP range should be (1) a last resort (2) after you've determined there's no other way (3) to prevent people from causing problems with your system. Quote Link to comment Share on other sites More sharing options...
oracle765 Posted March 31, 2016 Author Share Posted March 31, 2016 Insurance & Travel Affiliates Our Terms and Conditions Page Views:231 Mar 2016 05:34:32Visit Length:1 min 51 secs 1 - Wilmington, Delaware, IP Address:E.i. Du Pont De Nemours And Co. (52.38.70.94) Shopping Prices & Deals Australia Privacy Policy Page Views:131 Mar 2016 05:34:17 1 - Wilmington, Delaware, IP Address:E.i. Du Pont De Nemours And Co. (52.38.153.204) Compare Office Prices, Products & More Page Views:231 Mar 2016 05:34:11Visit Length:23 hours 30 mins 11 secs 1 - Wilmington, Delaware, IP Address:E.i. Du Pont De Nemours And Co. (52.36.135.116) Compare Car Rental Prices and Save . Compare Hotel Prices, Campervan Hire, Car Hire & Flights Page Views:231 Mar 2016 05:34:11Visit Length:1 min 6 secs 1 - Wilmington, Delaware, IP Address:E.i. Du Pont De Nemours And Co. (52.38.81.14) Compare Luggage, Bags & Suit Cases World cruises & cruise liner deals Page Views:331 Mar 2016 05:33:48Visit Length:47 seconds 1 - Wilmington, Delaware, IP Address:E.i. Du Pont De Nemours And Co. (52.36.166.39) Compare Home & Garden Store Prices Compare clothing prices Australia Page Views:331 Mar 2016 05:33:33Visit Length:23 hours 36 mins 40 secs 1 - Wilmington, Delaware, IP Address:E.i. Du Pont De Nemours And Co. (52.37.137.122) Compare Computer Prices, Australia City & Airport Parking Prices in America Page Views:131 Mar 2016 05:33:25 1 - Wilmington, Delaware, IP Address:E.i. Du Pont De Nemours And Co. (52.35.220.124) Visit Page: Insurance & Travel Affiliates Page Views:731 Mar 2016 05:33:23Visit Length:2 mins 25 secs 1 - Wilmington, Delaware, IP Address:E.i. Du Pont De Nemours And Co. (52.37.96.86) About our brand & our big ideas Compare Car Rental Prices and Save . Page Views:531 Mar 2016 05:32:21Visit Length:1 min 39 secs 1 - Wilmington, Delaware, IP Address:E.i. Du Pont De Nemours And Co. (52.37.109.208) Income Protection Prices & products Australia, compare free Compare Energy providers and save Page Views:231 Mar 2016 05:27:26Visit Length:57 seconds 1 - Wilmington, Delaware, IP Address:E.i. Du Pont De Nemours And Co. (52.37.245.242) Shopping Prices & Online Shopping Deals in America Compare Videos Games & Consoles Hi Again Just an update, we now seem to be getting hammered from E.I Du pont, it's always the same browser, screen resolution but different IP. I am honestly unsure what the best thing to do here Please find attached latest traffic all from the same place Quote Link to comment Share on other sites More sharing options...
requinix Posted March 31, 2016 Share Posted March 31, 2016 Hmm. Report it as abuse to Amazon, then block the IP range (52.32.0.0/11). Quote Link to comment Share on other sites More sharing options...
oracle765 Posted April 3, 2016 Author Share Posted April 3, 2016 hi there yes I will report it as this is only some of it I don't quite understand the IP address range blocking 52.32.0.0/11 part when the IPs are 52.36.etc.etc and 52.36.etc.etc and 52.36.etc.etc please advise Quote Link to comment Share on other sites More sharing options...
requinix Posted April 3, 2016 Share Posted April 3, 2016 If you do a WHOIS lookup on one of those IP addresses then you'll see they all belong to one CIDR (IP address range) block: 52.32.0.0/11, which translates to 52.32.0.0 - 52.63.255.255. While whoever is running the servers could change their IP address at basically any time, they'll still end up with something in that range. Probably. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.