Hello,
Some months ago my Drupal 7.x site was unfortunately hit by site/s trying to use it as a streaming "stager". At that time I deleted all the nodes which were obviously added by those sites - with the consequence that I now keep getting lots of "page not found" messages when looking at "Top Visitors" in "Log Reports". Since then I did of course activate functionality such as Mollom, reCaptcha and Honeypot. These days I look at the "Top Visitors" page in Administration to find "suspicious" sites and then proceed to block these. However, blocking them by using their respective IP-address is tedious, since there are so many. Does anybody know of a way to block a whole range of IP-addresses in one go, such as block "xx.yy.0.0" to "xx.yy.255.255"? Has anybody else had a similar experience. And, if so, what did THEY do about it. Thanks in advance for any hints.
Regards
H. Stoellinger
Salzburg, Austria

Comments

megan_m’s picture

In Drupal 6 you could use percent signs as wildcards, so xx.yy.% would match anything starting with xx.yy. Drupal 7 won't let me enter that though. Looks like you need this:

https://www.drupal.org/project/ip_ranges

Woolwich Web Works: Custom web development

hstoellinger’s picture

Thanks for the quick answer. I installed the module to sites/all/modules (as with all other modules), but I cannot find any tab/button etc. to specify blocked IP-addresses. What might I be missing? Thanks for your help.

VM’s picture

where are you looking? Per the project page the config/admin screen would be @ admin/config/people/ip-range

hstoellinger’s picture

Thanks, but on the page you suggest (i.e. admin->people) I cannot see an item ip-range.

VM’s picture

what occurs if you utilize the path rather than look for a link yoursite.com/admin/config/people/ip-range

if that doesn't work, I suggest a bug. As such, research the issue queue of the module in questions for similar reports. If none, file one.

hstoellinger’s picture

Thanks for the hint. Things are working now.

mmjvb’s picture

or at the webserver, in htaccess if you must.

hstoellinger’s picture

Good suggestion, except that I don't have access to the webserver itself, so as to be able to change the needed parameters. Will have a look at .htaccess as a possible way around.