Block a bot by Netmask (hmm, simple mistake?)

Okay, I have a Juniper firewall. I'm seeing a ton of traffic from the Twiceler bot in the range of 100,000 hits a day. Luckily they've more recently put up a list of IP addresses their bots use at:

http://www.cuill.com/twiceler/robot.html

So, I'm blocking all of these now. However I think it's a simple Netmask issue I'm having. I'm blocking all ports from

208.36.144.0/24
38.99.13.0/24
38.99.44.0/24
64.1.215.0/24

However, I am still seeing the bot in server log files. Could it be that I should not be specifying .0 at the end, but instead .1? Like this in the policy?

64.1.215.1/24

Thanks. I think this is simple and that is my mistake. Would appreciate input before making the change to find out that is not the problem tomorrow.

 

 

 

 

Top