New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
block/redirect all requests from an isp
hyperblast
Member
in Help
i would like to block all access to my website (webserver apache) coming from a specific isp.
how do i find out all ip-blocks of the isp? is it also possible that all requests from the blocked isp are redirected to a special page?
i find it challenging to identify all ips to the isp.
or is that not such a big problem?
chatgpt only gives me this feedback:
<RequireAll>
Require all granted
Require not ip 123.45.67.0/24
Require not ip 124.56.78.0/16
</RequireAll>
Comments
If you got Cloudflare on the website you can do that using Page Rules.
What ISP (ASN) are we talking about? Making it automated won't be fun but making a scraper that just scraps all the prefixes aint that hard.
AS8767
i know, but website should not be cloudflared.
Mentally strong people allow equal access to information for everyone and do not block any ISP for GET requests.
Blocked.
for which requests is it worth blocking an isp?
we ((c) yoursunny) are of the opinion that we can make use of our domiciliary rights in special cases.
Hi,
and hrhr... dying hard in DDOS? :>
@hyperblast
there are different websites offering information like this.
For example you could grep
https://bgp.he.net/AS8767#_prefixes
To get a list.
But AS8767 is actually an access provider. Sure you want to block it? I assume you have an issue with one of their customers. Maybe blocking them would be more effective to have less false positive...
You could just use https://api.bgpview.io/asn/8767/prefixes or download https://bgp.tools/table.txt and grep for that ASN.
i am sure!
I think best solution would be putting your server behind a reverse proxy like cloudflare or other cdns, and the that configure that proxy to block access from certain IP subnets. To do so look for ASN of that ISP and get list of IP subnets. Then create a rule in cloudflare dashboard to deny access from these ip subnets.