1. Advertising
    y u no do it?

    Advertising (learn more)

    Advertise virtually anything here, with CPM banner ads, CPM email ads and CPC contextual links. You can target relevant areas of the site and show ads based on geographical location of the user if you wish.

    Starts at just $1 per CPM or $0.10 per CPC.

How to i block theplanet.com whole isp with ip range

Discussion in 'Security' started by amaderforum, Sep 5, 2007.

  1. #1
    How to i block theplanet.com whole isp with ip range. This is now 2 time i got ddos attract from that company.

    last time ip was :: 70.87.15.10

    Now my question is i wanna ban whole ISP::

    Pls need help.. i don't have root access.

    wht is the code for ..htaccess

    or i can add use cpanel IP Deny Manager.

    i complain that company nothing happen .. they r b@@ustard didn't answer my email.

    also can someone teach me how to do ddos.. i wanna do same.
     
    amaderforum, Sep 5, 2007 IP
  2. randomIntellections

    randomIntellections Well-Known Member

    Messages:
    985
    Likes Received:
    13
    Best Answers:
    0
    Trophy Points:
    180
    #2
    enter this 70.84.0.0-70.87.255.255 in your cpanel ip deny manager , they have many ranges , you cannot determine all their ranges . and you are in no capacity to do a DDoS against them . give up such lame ideas .
     
    randomIntellections, Sep 5, 2007 IP
  3. agnivo007

    agnivo007 Peon

    Messages:
    4,290
    Likes Received:
    289
    Best Answers:
    0
    Trophy Points:
    0
    #3
    And the next step is to submit abuse reports [abuse@theplanet.com] so that the attacker's box is pulled down! ;)

    Remember, don't get haughty, just explain the issue, some server log snaps and the IP.
     
    agnivo007, Sep 5, 2007 IP
  4. amaderforum

    amaderforum Well-Known Member

    Messages:
    155
    Likes Received:
    4
    Best Answers:
    0
    Trophy Points:
    110
    #4
    Thanks everybody i found solution about DDOS. i complain against theplanet.com to FBI.

    here you go: http://www.ic3.gov/

    if anybody face like this problem save log and send them direct.

    Filing a Complaint with IC3
    IC3 accepts online Internet crime complaints from either the person who believes they were defrauded or from a third party to the complainant. We can best process your complaint if we receive accurate and complete information from you. Therefore, we request that you provide the following information when filing a complaint:

    * Your name
    * Your mailing address
    * Your telephone number
    * The name, address, telephone number, and Web address, if available, of the individual or organization you believe defrauded you.
    * Specific details on how, why, and when you believe you were defrauded.
    * Any other relevant information you believe is necessary to support your complaint.


    File a Complaint >>
     
    amaderforum, Sep 6, 2007 IP
  5. BTS

    BTS Active Member

    Messages:
    184
    Likes Received:
    6
    Best Answers:
    0
    Trophy Points:
    58
    #5
    Block there ip with Firewall if you host your site in your server
    or by .Htaccess
     
    BTS, Sep 6, 2007 IP
  6. amaderforum

    amaderforum Well-Known Member

    Messages:
    155
    Likes Received:
    4
    Best Answers:
    0
    Trophy Points:
    110
    #6
    Thanks for your idea. i also complain my hosting company about there attack
     
    amaderforum, Sep 6, 2007 IP
  7. pc_user

    pc_user Notable Member

    Messages:
    1,891
    Likes Received:
    94
    Best Answers:
    0
    Trophy Points:
    235
    #7
    Why focus on the planet? I imagine it's not them directly doing the DOS?
     
    pc_user, Sep 25, 2007 IP
  8. lkj

    lkj Peon

    Messages:
    729
    Likes Received:
    17
    Best Answers:
    0
    Trophy Points:
    0
    #8
    drop with a packet filter (iptables, ipfw or whatever you have).
     
    lkj, Sep 25, 2007 IP
  9. robca

    robca Well-Known Member

    Messages:
    55
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    116
    #9
    Ok, but when blocking the full iprange from that ISP how do you think they can give you an answer to your mail? I would contact them and block only the machine that is giving you problems...
     
    robca, Oct 21, 2007 IP
  10. inworx

    inworx Peon

    Messages:
    4,860
    Likes Received:
    201
    Best Answers:
    0
    Trophy Points:
    0
    #10
    Blocking everyone from the DC isnt a good idea since they host over 40K servers..
     
    inworx, Oct 22, 2007 IP
  11. webgk.com

    webgk.com Peon

    Messages:
    96
    Likes Received:
    3
    Best Answers:
    0
    Trophy Points:
    0
    #11
    Yep, that's right.
    But I think for the time being that would be the best solution.
    Later on those IPs can be unblocked.
    Meanwhile it would be helpful to find the loophole/cause of the attack.
     
    webgk.com, Oct 22, 2007 IP
  12. hans

    hans Well-Known Member

    Messages:
    2,923
    Likes Received:
    126
    Best Answers:
    1
    Trophy Points:
    173
    #12
    why focus on the planet is a simple answer.
    if i look at my logs then the planet may be number one global hacker-host hosting lots of weird stuff creating lots of doubtful activities. hence it is reasonable to assume that the planet gives a sh .. about netiquette and human behavior or legal behavior.

    hence instead of wasting time
    1 mail to planet and same time copy to highest authority or datacenter hosting their servers if different.


    amaderforum
    that is in this case the best solution - there are at least 3 official authorities in charge of cyber crime in the USA

    FBI, CIA AND IC3 have forms for complaints - depending on exact nature one of the 3 is best.

    at the very maximum you could give the planet 12 hrs to shut down the hackers site. but that is really a long time to act. after that always TOP level.

    it seems to me that there are several hosting either belonging together or whatever - all have same activities hosted and whois shows some relationship among them

    A whois 75.125.52.146 shows a mix up between below 2 hosting:

    ev1servers.net =
    216.40.192.0/18
    75.125.0.0/17

    theplanet.com =
    70.84.0.0/14
    74.52.0.0/15
    74.54.0.0/16

    I use iptables so far for a number of IPs from above 2 hosts - NOT yet for all above full IP-ranges - but may be soon enough as I am just these weeks going thru all past months hacker stuff to create lists and data to be published in my blog.
     
    hans, Nov 7, 2007 IP
  13. Mave

    Mave Peon

    Messages:
    6
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #13
    Yeah, I don't recommend banning the entire range. Theplanet is not ddos attacking you, but someone on their network.
     
    Mave, Nov 17, 2007 IP