[Charlug] IP Ranges to block

[Todd Blake]

It's be nice if something akin to the RBL's that are out there were
maintained.  Something you could easily suck into an loop and run it through
iptables or tcp wrappers or something.

I'd start it up myself but in 6 months I'd lack the dedication to maintain
it.....

On Mon, Jan 26, 2009 at 12:31 PM, Pierre Abbat <phma at phma.optus.nu> wrote:

> On Monday 26 January 2009 11:58:28 David Simmons wrote:
> > Guys,
> >
> > I'm experiencing alot of 'exposed to the internet'
> > relief on my servers by just adding:
> >
> > ALL: 60.
> > ALL: 219.
> > ALL: 119.
> >
> > to my /etc/hosts.deny    file
> >
> > Any other IP ranges that I should add?
>
> Here's the list of all IP addresses that have tried to break in to my box
> in
> the past month. Anyone who fails at least ten times in a day to get in by
> ssh
> or ftp is dropped on the iptable.
> ---
>  116.38.163.170
>  117.28.224.71
>  121.32.129.70
>  122.193.4.115
>  124.254.63.124
>  147.83.29.83
>  189.56.49.147
>  200.111.152.86
>  200.150.15.11
>  200.57.19.206
>  201.47.187.138
>  201.90.162.172
>  202.125.176.2
>  203.200.81.104
>  203.250.137.132
>  203.93.0.3
>  203.95.104.21
>  210.40.128.31
>  210.77.146.53
>  211.155.224.202
>  217.27.62.73
>  218.242.158.100
>  218.25.25.206
>  218.62.227.3
>  220.128.149.198
>  220.130.139.220
>  221.186.163.218
>  221.4.205.132
>  221.6.179.212
>  58.222.11.2
>  58.253.67.58
>  58.83.8.13
>  59.185.104.218
>  60.12.107.159
>  60.191.43.29
>  61.108.210.11
>  61.136.145.5
>  61.184.101.46
>  61.185.81.222
>  61.9.140.67
>  62.75.176.135
>  62.77.89.244
>  64.27.31.185
>  66.165.168.55
>  69.72.173.170
>  70.52.251.254
>  71.156.184.134
>  72.52.198.116
>  72.55.133.104
>  74.53.247.18
>  74.63.192.11
>  74.63.36.250
>  75.37.250.107
>  78.38.176.100
>  79.98.88.2
>  88.255.101.209
>  88.255.116.130
>  92.243.6.96
> ---
> phma
> _______________________________________________
> CharLUG mailing list
> CharLUG at charlug.org
> http://charlug.org/cgi-bin/mailman/listinfo/charlug
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://charlug.org/pipermail/charlug/attachments/20090126/9add1415/att=
achment.htm