Ban all IP but US

How will you address the problem?

[henry0]

I have a client quite successful as such its site has a lot of exposure.
My contact forms are well protected and also use a system consisting in typing the result of a random alphanumerical display.

But there is not such a thing (Well, I suppose)
that protects from manual typing and clicking to send :)

I might need to ban all IPs but US
Any idea how to do it?

Thanks

[FalseDawn]

I use an IP to country database to protect my payment forms from foreign scammers using automated techniques to try multiple cc numbers and it works pretty well (although like most things, it's not foolproof)
See here for an example database:
[ip-to-country.webhosting.info...]

It's then just one query (there is an example on the site) to match the user's IP address to their country and ban if not US.

(There are other, probably more accurate geolocating databases, but at a price, and none are 100% accurate, and it doesn't prevent someone using a proxy.)

[henry0]

Thanks, I will look at it

I just decided to also go for a drastic measure
Knowing that IP Ban is not an universal panacea:

Disallowing CC and BCC

[benevolent001]

If you are using Apache , there is pretty useful utility mod_geoip
you can also use it

[henry0]

False_Down
How did you get that XL in a MySQL format.
I D-loaded it but it has more than 65000 lines therefore XL could only open a partial.(and I do not want setting up a filter based on partial data)
Further MySQL could not either import it for the same reason

I need only the US rows but really have no clue on firstly getting a clean full Db in order to process?

[FalseDawn]

I imported the file to Microsoft Access, then copied to a mysql attached table from Access (I never use excel for any db work)
if you want a mysql script to create the table, PM me your email and I'll send it you.