I have several sites on a Shared Windows platform that have been having several SQL Injection attacks (my code stops them from actually changing the database). I track the IP address of people who attempt the SQL Injection and I would like to block those IP addresses from accessing my website. The sites are written in Classic ASP. What is the best way to have these IP addresses blocked?
I tried adding a .htaccess file with the following (but I’m not sure if windows/asp actually read that):
order allow,deny
deny from xxx.xxx.xxx.xxx
allow from all
The option is not available for shared windows users to block the IP from their end. But it can be done from server side. Please raise a support ticket with the IP address which you want to block for your website. We will do it and update you back as soon as possible.
Sorry for the mis-understanding, the PM you got was correct. We have tested this option in control panel and its working fine. So you can use “Web Access Control” option for blocking the IP, for sites on a Shared Windows platform.