How could i ban the whole country(Thailand) from accessing my site

[chris_cely]

Greetings to everyone.

I posted my query few days ago about my database informations being deleted but i don't know how it's happening. Well, i find out that somebody hacks my site and intentionally deletes the informations.

My question now is how can i ban him from viewing our site? Through our logs, i noticed that the IP being used is from Thailand and always changes. I was thinking at first to just ban an IP but since he is using alot of different IPs, there's no way i would know what would be his next IP. So i was thinking maybe i will just ban IPs coming from that country but i don't know how to do that.

If anyone could help me, i would highly appreciate it. My server only uses ASP (not PHP). If anyone out there who has a big heart in helping me please. I am so desperate already and i am getting frustrated on how to protect my site from this person.

[russell]

if your site is being hacked, how are you going to ban anybody???

fix your security problems. that is the main thing u need to worry about. how is it being hacked?

[chris_cely]

Thank you russell for the reply, hope you could help me.

Ok here's the story. Before, i am working in a company with two boses (they are partners). They got mad at each other so they broke the partnership but the other partner decided to go on his own and he still hired me to work for him. I will differentiate them with boss1 and boss2. Boss2 is the one i am working with now. I am working with them for like about 5 years now so most of our pages me and boss1 put it all together. All the codes and everything and he still have all those pages. I found out that before he turned over some of the sites, boss1 took out the restrictions we put before on the pages so he could still access them without logging in. I found that out and put back the restrictions. The site is ok for like 4 days but then yesterday the informations are missing again. I suspected that boss1 did it again. I have no concrete proof that it was him cause it always shows Thailand when i checked on the IP that is being used. All i know is he is the only one who knows the exact name of our database and the pages where to go around the site. I really don't know how he get to change or delete informations in the site again.

SO i was thinking that maybe if i ban using IPs in that country, it will solve the problem. Like a program that would determine the visitors if they are from Thailand and then redirect to a page saying like "You are denied to access this site". Is it possible to do that?

[russell]

1. boss1 is certainly breaking laws. boss2 should prosecute to the fullest extent of the law in the country u are in

2. boss1 is probably not using http to do this (though he might be)

3. check ip -- suppose it is 255.255.255.100
block everything that comes from 255.255.255.xxx

4. change ALL of your passwords now

[chrismartz]

1. boss1 is certainly breaking laws. boss2 should prosecute to the fullest extent of the law in the country u are in

2. boss1 is probably not using http to do this (though he might be)

3. check ip -- suppose it is 255.255.255.100
block everything that comes from 255.255.255.xxx

4. change ALL of your passwords now5. change database name

[chris_cely]

Boss2 wanted to file a lawsuit for boss1 but we don't know how to prove that he is the one doing it cause boss1 uses different IP and not from his computer. If there's a way we could prove that he is the one responsible for this boss2 is going to sue him.

I changed all the passwords and changed the database name already. Just wanted to add more security and what i am thinking is banning him. Since it always came up that it is Thailand that access those pages, i wanted to know if there's a way to ban users from that country. I can't just use the suggestion numer 3 cause it always changes. like at it starts with 203.---- and then another is 63.---- and probably change again later. Boss1 is so smart so i am trying everything to block him.

[russell]

5. change database namegood call