How to block nasty IP addresses from bombarding my shop

[lateral]

Hi guys,

 

Over the past few months I have noticed that when I start the Back Office Dashboard, that there have been very high numbers of users "in the last 30 minutes"....some of these have been more than 100 which is very unusual for my shop.

 

When I looked at the IP addresses of these Users, I am seeing what looks like the same IP address accessing (pinging) my site multiple instances in a very short period of time....

 

I installed Vekia's "Ban IP Free) module and successfully block the bad IP address and the count dropped dramatically.

 

I checked again today and noticed another high visitor count and when I checked I saw this (see the attached screen shot)

 

http://awesomescreenshot.com/0a74s7u966

 

What I would like to know is how do I stop this from happening and how worried should I be?

 

As I only see product in Australia, should I implement Geo Location blocking and use the Native Prestahop module????

 

Thanks for your help.

 

Regards

Greg

 

 

[bellini13]

This happens to pretty much all servers on the internet.  They have bots installed just slamming servers looking for security weaknesses and a way in.  You don't want to know what the secure log of my server looks like every day.

 

Ideally your hosting provider should give you a way to blacklist/whitelist IP addresses, I would suggest that you start by speaking with them.  If it is a shared environment, they should be invested in protecting this server and the 100's or 1000's of other sites on it.  

 

If it is a VPS/physical dedicated server, then you should have the ability to add a secure firewall with better features than a module can.  I would reach out to the hosting provider, let them know what is going on and see what tools they have to allow you to block this traffic.

[craigplant]

I also noticed this when i started my shop. after looking in to some of the ip addresses it was things like google bot and bing bot indexing my pages. i would have a look in to the ip addresses before attempting to block them or you may hurt your seo

[lateral]

Thanks for the replies guys.

 

I have the following few questions:

 

1. How do I determine if an IP address is friendly or not? i.e: simply Google or Bing indexing and not some 16 year kid in the Ukraine trying to make my life a misery?

2. Does the Geolocation functionality within Prestashop actually work and is it a good starting point?

3. If I implement the Geolocation function within Prestashop, so I need to regularly update the GeoLiteCity.dat file? If so, how?

 

Thanks

Regards

Greg

Edited April 3, 2015 by lateral (see edit history)

[bellini13]

you can google search the IP address. if it is a valid BOT, you should find information about that.

[lateral]

Thank mate

 

I've been using http://www.iplocation.net/ to check.

 

What about my other questions?

 

Regards

Greg