[Charlug] IP Ranges to block

[Pierre Abbat]

On Monday 26 January 2009 11:58:28 David Simmons wrote:
> Guys,
>
> I'm experiencing alot of 'exposed to the internet'
> relief on my servers by just adding:
>
> ALL: 60.
> ALL: 219.
> ALL: 119.
>
> to my /etc/hosts.deny    file
>
> Any other IP ranges that I should add?

Here's the list of all IP addresses that have tried to break in to my box in 
the past month. Anyone who fails at least ten times in a day to get in by ssh 
or ftp is dropped on the iptable.
---
 116.38.163.170
 117.28.224.71
 121.32.129.70
 122.193.4.115
 124.254.63.124
 147.83.29.83
 189.56.49.147
 200.111.152.86
 200.150.15.11
 200.57.19.206
 201.47.187.138
 201.90.162.172
 202.125.176.2
 203.200.81.104
 203.250.137.132
 203.93.0.3
 203.95.104.21
 210.40.128.31
 210.77.146.53
 211.155.224.202
 217.27.62.73
 218.242.158.100
 218.25.25.206
 218.62.227.3
 220.128.149.198
 220.130.139.220
 221.186.163.218
 221.4.205.132
 221.6.179.212
 58.222.11.2
 58.253.67.58
 58.83.8.13
 59.185.104.218
 60.12.107.159
 60.191.43.29
 61.108.210.11
 61.136.145.5
 61.184.101.46
 61.185.81.222
 61.9.140.67
 62.75.176.135
 62.77.89.244
 64.27.31.185
 66.165.168.55
 69.72.173.170
 70.52.251.254
 71.156.184.134
 72.52.198.116
 72.55.133.104
 74.53.247.18
 74.63.192.11
 74.63.36.250
 75.37.250.107
 78.38.176.100
 79.98.88.2
 88.255.101.209
 88.255.116.130
 92.243.6.96
---
phma