Blocking IP addresses listed on external sites

vba_php · September 22, 2020, 12:54pm

has anyone here ever seen these 2 sites?

TOR EXIT NODES
https://check.torproject.org/torbulkexitlist

with regard to the former, the domain has one page per country I believe. so, you can get listings for like say, China and Russia on these 2 pages:

China: https://www.ipdeny.com/ipblocks/data/countries/cn.zone

Russia: https://www.ipdeny.com/ipblocks/data/countries/ru.zone

my question to folks here is, would this information be useful to me? I am putting together some website content that I do not want everyone in the world to see. And, it is possible that by some miracle, the sophisticated hacker world outside the USA will want to take it down and/or disrupt the service offerings of it if they find out that it exists. Anyone got any advice on whether these resources are even worth the effort to use? and if they are, what is the best way to leverage them? e.g. - when pulling info from the server DB to display content on the page, check this IP data first to see who they are and whether I will allow them or block them?

thanks.

Adam

Isitabird · September 22, 2020, 8:39pm

Hi,

Firstly hackers do not just live in China and Russia, and with over 4 billion IP’s that’s a lot of “if” statements.

Lets face facts no matter how secure your site is if a hacker wants “in” they will go to great lengths to get in, and in a lot of cases succeed

Its down to you to make sure your site is as secure as possible and it doesn’t have to be complicated

Instead of blocking ip’s why do you not grab and store the ip’s and monitor them for any strange activity then block them.
Start very simple and give an ip address 3/4/5 attempts to login before its blocked, only allow the same ip address to register once on your site, the list goes on and on, but don’t fall into the trap of over-complicating it