Welcome to the eBizInsider eCommerce Forums! -- Everything You Need for eCommerce.

If this is your first visit, be sure to check out the FAQ. Users must Register before posting. Our forum is open to the public.

Username: Password:
Not Registered? Remember me ?
eCommerce Forums - eBiz Insider Magazine » Operations Management » Fraud Detection - Loss Prevention » Banning ALL IP addresses from Africa

Fraud Detection - Loss Prevention Discuss with others how you prevent online and offline fraud.

Reply
Old 03-28-2008, 03:03 PM   #1 (permalink)
 
Status: Junior Member
Join Date: Mar 2008
Location: Michigan
Posts: 6
Blog Entries: 1
 ocsmike is a Junior Member

Send a message via AIM to ocsmike


ocsmike is offline  
Default Banning ALL IP addresses from Africa

I posted this on merchant colutions and see now it is more appropriate here...

I am really getting hammered by African fraud. I've stopped all international orders but they just fill in US addresses to test out their stolen credit cards.

I check the IP addresses and ban them as they come in and have tried to do ranges but I must be missing the ones they use because they just keep coming in...

But can someone give me the range of IP addresses, in the correct form, to ban ALL orders from ANYWHERE in Africa.

These scammers are driving me nuts with dozens of fraud orders a day.
__________________
----------------
Mike
Online Christian Shopper
www.onlinechristianshopper.com


Reply With Quote
Old 03-28-2008, 03:57 PM   #2 (permalink)
 
cactus_jeffreym's Avatar
 
Status: Solid Cactus Team Member
Join Date: Feb 2008
Posts: 9
 cactus_jeffreym is a Junior Member



cactus_jeffreym is offline  
Default

That's never a good thing. Best advice I can give off the top of my head on this one is to try DNSstuff: On-demand DNS and network tools to analyze, diagnose and monitor a domain or IP address. On the left side of the page there is a search box for IP Information. Throw in one of the IP's that you have and it should give you an IP range for that country.
__________________
Jeffrey M.

Solid Cactus - Senior Project Manager


Reply With Quote
Old 03-28-2008, 04:29 PM   #3 (permalink)
 
Status: Junior Member
Join Date: Mar 2008
Location: Michigan
Posts: 6
Blog Entries: 1
 ocsmike is a Junior Member

Send a message via AIM to ocsmike


ocsmike is offline  
Default

Thanks... my fraudster is from Ghana....Following your suggestion, I learned I that this is the range I want to block.

41.210.0.0 to 41.210.63.255

I can't seem to find the correct way to enter this on the IP block form on Yahoo.... any suggestions?
__________________
----------------
Mike
Online Christian Shopper
www.onlinechristianshopper.com


Reply With Quote
Old 03-28-2008, 04:57 PM   #4 (permalink)
 
cactus_jeffreym's Avatar
 
Status: Solid Cactus Team Member
Join Date: Feb 2008
Posts: 9
 cactus_jeffreym is a Junior Member



cactus_jeffreym is offline  
Default

I believe the syntax you will need to use is 41.210.63.255/18. This will block 41.210.0.0 through 41.210.63.255 for a total of 16384 IPs.

Yahoo uses CIDR for range blocking. I used this site to get the proper syntax: IP Address Guide | Ping | Traceroute | DNS Lookup | CIDR | Geolocation | HTML Validator. DNS Stuff is sometimes more accurate and easier to use then Yahoo's reverse DNS which is why I recommended them.
__________________
Jeffrey M.

Solid Cactus - Senior Project Manager

Last edited by cactus_jeffreym; 03-28-2008 at 05:00 PM.


Reply With Quote
Old 03-28-2008, 05:07 PM   #5 (permalink)
 
Status: Junior Member
Join Date: Mar 2008
Location: Michigan
Posts: 6
Blog Entries: 1
 ocsmike is a Junior Member

Send a message via AIM to ocsmike


ocsmike is offline  
Default

Thanks, Jeff....
I punched it in and hope it stops .... this guy has been hitting me hard for weeks now. Hopefully he'll move on.
Have a great weekend!
__________________
----------------
Mike
Online Christian Shopper
www.onlinechristianshopper.com


Reply With Quote
Old 04-09-2008, 02:59 AM   #6 (permalink)
 
Adrian's Avatar
 
Status: Junior Member
Join Date: Apr 2008
Location: Cape Town
Posts: 3
 Adrian is a Junior Member

Send a message via MSN to Adrian


Adrian is offline  
Lightbulb

Hi Mike,

I'm from South Africa. We've been very sensitised to against fraud and find that Nigeria and Ghana are countries where fraudsters have taken refuge.

Sorry that you were hit by an African. It is a poor reflection on the good progress that is being made here.

Regards,

Adrian
EvaluNet >> Educational Software - maths, science, languages, EMS, life skills


Reply With Quote
Old 04-22-2008, 05:37 PM   #7 (permalink)
 
Status: Junior Member
Join Date: Apr 2008
Posts: 1
 mako is a Junior Member



mako is offline  
Default Same Problem here

I am getting at least a few hundred every month from Gambia.
212.60.73.125
Country EU # country is really somewhere in African Region

Do you know what range I would block for them, Yahoo has been no help, I have to keep adding and deleting IP's because I am over 100.

When I try to report them to credit card companies, I keep getting passed around, no one seems to care. I guess they dont worry because if a charge goes through it falls back on the merchant.


Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -4. The time now is 04:09 AM.

Copyright Solid Cactus Inc. 2008