nav2567

<div>
Thanks. &nbsp;How about listing the IPs used by a country? &nbsp;Is it possible?
</div>


Thanks.  How about listing the IPs used by a country?  Is it possible?

<div>
You can attempt Geo Blocking, which is easy to do + will not get you what you're after.<br />
<br />
Anyone evil, will mask their IP, so whatever you're seeing is likely a misunderstanding of your users about how to use your system.<br />
<br />
<a href="http://blog.jeshurun.ca/technology/block-countries-ubuntu-iptables-xtables-geoip" rel="ugc">http://blog.jeshurun.ca/te<wbr />chnology/b<wbr />lock-count<wbr />ries-ubunt<wbr />u-iptables<wbr />-xtables-g<wbr />eoip</a> is one discussion about this.<br />
<br />
<a href="https://mattwilcox.net/web-development/unexpected-ddos-blocking-china-with-ipset-and-iptables" rel="ugc">https://mattwilcox.net/web<wbr />-developme<wbr />nt/unexpec<wbr />ted-ddos-b<wbr />locking-ch<wbr />ina-with-i<wbr />pset-and-i<wbr />ptables</a> provides far superior speed (lower overhead) using ipset.<br />
<br />
The ipset example covers how to block China. You can extend/modify this approach to add ipset hashes to block any country.
</div>


You can attempt Geo Blocking, which is easy to do + will not get you what you're after.

Anyone evil, will mask their IP, so whatever you're seeing is likely a misunderstanding of your users about how to use your system.

http://blog.jeshurun.ca/technology/block-countries-ubuntu-iptables-xtables-geoip [http://blog.jeshurun.ca/technology/block-countries-ubuntu-iptables-xtables-geoip] is one discussion about this.

https://mattwilcox.net/web-development/unexpected-ddos-blocking-china-with-ipset-and-iptables [https://mattwilcox.net/web-development/unexpected-ddos-blocking-china-with-ipset-and-iptables] provides far superior speed (lower overhead) using ipset.

The ipset example covers how to block China. You can extend/modify this approach to add ipset hashes to block any country.

<div>
One note. Be sure to change <b>-j DROP</b> to <b>-j REJECT --reject-with icmp-host-prohibited</b> else you can end up in a serious jam, with your machine going down, if you're hit with massive attack traffic.<br />
<br />
There are many discussions online about why you should use this approach.
</div>


One note. Be sure to change -j DROP to -j REJECT --reject-with icmp-host-prohibited else you can end up in a serious jam, with your machine going down, if you're hit with massive attack traffic.

There are many discussions online about why you should use this approach.

<div>
<div class="content wysiwyg-content">
Hello, <br />
<br />
Our messaging system shows a few unuaual user login from Lkorodu, Lagos in Nigeria. &nbsp;<br />
<br />
Is there any good website or is it possible to list networks being used by Lkorodu, Lagos instead of the entire Nigeria?<br />
<br />
Please advise.
</div>
</div>


Hello, 

Our messaging system shows a few unuaual user login from Lkorodu, Lagos in Nigeria.  

Is there any good website or is it possible to list networks being used by Lkorodu, Lagos instead of the entire Nigeria?

Please advise.

List networks being used by Lkorodu, Nigeria

Internet Protocol Security (IPsec) is a protocol suite for secure Internet Protocol (IP) communications by authenticating and encrypting each IP packet of a communication session. IPsec includes protocols for establishing mutual authentication between agents at the beginning of the session and negotiation of cryptographic keys to be used during the session. IPsec can be used in protecting data flows between a pair of hosts (host-to-host), between a pair of security gateways (network-to-network), or between a security gateway and a host (network-to-host). IPsec is an end-to-end security scheme operating in the Internet Layer of the Internet Protocol Suite.

Internet Protocol Security

Network security consists of the policies adopted to prevent and monitor authorized access, misuse, modification, or denial of a computer network and network-accessible resources. Network security involves the authorization of access to data in a network, and covers a variety of computer networks; conducting transactions and communications among businesses, government agencies and individuals. Networks can be private, such as within a company, and others which might be open to public access.