Weil ich es satt habe, dass “ScriptKiddies” meine Webprojekte mit ihren Attacken belästigen, habe ich inzwischen auch sämtliche IP Adressen aus China und Korea gesperrt. Sorry, nix persönlich gegen Chinesen und Koreaner - da kommt aber für mich kein sinnvoller Traffic her also kann ich die Länder auch komplett sperren und mir den Ärger sparen.
Die IP Liste dazu gibts hier: http://www.okean.com/sinokoreacidr.txt
Hier mal wieder ein Update aller Server denen ich den Zugang zu meinen Servern via iptables verwehre. Auf die Liste kommt jeder Rechner der entweder ssh Angriffe sendet, oder über Myriaden von GETs versucht bekannt Schwachstellen von z.B. Wordpress, phpMyAdmin etc. auszunutzen.
Leider wird die Liste immer länger, und leider sind ein paar Call-in IPs dabei …
Chain INPUT (policy ACCEPT)
target prot opt source destination
DROP all – 95.168.183.134 anywhere
DROP all – 231-35.141.95.serverdedicati.seflow.it anywhere
DROP all – 95.131.67.64 anywhere
DROP all – news.infosistemi.com anywhere
DROP all – 94.50.220.57 anywhere
DROP all – be-304696.easylius.net anywhere
DROP all – ns207061.ovh.net anywhere
DROP all – host-94-137-254-94.ugmk-telecom.ru anywhere
DROP all – 92.243.78.170.addr.datapoint.ru anywhere
DROP all – moscow.perfect-privacy.com anywhere
DROP all – hosted-by.bergdorf-group.com anywhere
DROP all – unknown.altushost.com anywhere
DROP all – 91.209.238.2 anywhere
DROP all – 91.201.66.76 anywhere
DROP all – 89-97-238-206.ip19.fastwebnet.it anywhere
DROP all – 51.228.47.89.primetelecom.ro anywhere
DROP all – 88.255.63.117 anywhere
DROP all – bosten.pmbs.de anywhere
DROP all – crawlh000.ayell.org anywhere
DROP all – 88.191.16.177 anywhere
DROP all – india044.server4you.de anywhere
DROP all – h1967974.stratoserver.net anywhere
DROP all – hosted-by.leaseweb.com anywhere
DROP all – hosted-by.leaseweb.com anywhere
DROP all – 85.17.174.203 anywhere
DROP all – i118.indigo.fastwebserver.de anywhere
DROP all – c142.cyan.fastwebserver.de anywhere
DROP all – o074.orange.fastwebserver.de anywhere
DROP all – g040.green.fastwebserver.de anywhere
DROP all – 84.254.195.57 anywhere
DROP all – net84-253-142-220.mclink.it anywhere
DROP all – ver78-9-83-157-4-52.fbx.proxad.net anywhere
DROP all – ca.9c.5f51.static.theplanet.com anywhere
DROP all – mail.onlywebserver.com anywhere
DROP all – a030.snake.cz anywhere
DROP all – 80.72.40.170 anywhere
DROP all – www.nord.hu anywhere
DROP all – 79.142.79.10 anywhere
DROP all – crawlh005.ayell.org anywhere
DROP all – whitdj317.easydservers.com anywhere
DROP all – host-78-111-99-76.teklan.com.tr anywhere
DROP all – 78.109.12.4 anywhere
DROP all – mail.canlialem.com anywhere
DROP all – 77.246.181.218 anywhere
DROP all – server.businessmaps.ca anywhere
DROP all – 3c.1d.344a.static.theplanet.com anywhere
DROP all – 74.50.87.170 anywhere
DROP all – u15427532.onlinehome-server.com anywhere
DROP all – 74.201.86.168 anywhere
DROP all – 72.55.164.79 anywhere
DROP all – rrcs-72-45-251-107.nys.biz.rr.com anywhere
DROP all – e2.f9.5546.static.theplanet.com anywhere
DROP all – 170-74-162-69.static.reverse.lstn.net anywhere
DROP all – 90-114-162-69.static.reverse.lstn.net anywhere
DROP all – mail.celebrityforums.com anywhere
DROP all – h-68-166-80-15.chcgilgm.static.covad.net anywhere
DROP all – rrcs-67-79-3-218.sw.biz.rr.com anywhere
DROP all – 67-23-5-45.static.cloud-ips.com anywhere
DROP all – 67-23-225-195.static.dimenoc.com anywhere
DROP all – dating.datingxtreme.com anywhere
DROP all – h-66-134-42-22.snvacaid.static.covad.net anywhere
DROP all – bigbertha.orange-hat.com anywhere
DROP all – 64-17-70-19.mo.warpdriveonline.com anywhere
DROP all – 62.68.253.220 anywhere
DROP all – 62.233.157.101 anywhere
DROP all – 61.152.76.4 anywhere
DROP all – 61.151.238.131 anywhere
DROP all – 61.150.72.170 anywhere
DROP all – 61.145.118.190 anywhere
DROP all – 60.13.129.139 anywhere
DROP all – 59.34.131.95 anywhere
DROP all – 59.108.54.66 anywhere
DROP all – 58.221.206.161 anywhere
DROP all – 58.137.18.109 anywhere
DROP all – www33137u.sakura.ne.jp anywhere
DROP all – cardkingdom.in anywhere
DROP all – 41.21.129.164 anywhere
DROP all – 38.99.168.120 anywhere
DROP all – 222.35.31.195 anywhere
DROP all – 222.35.142.100 anywhere
DROP all – 222.221.88.88 anywhere
DROP all – 221.195.72.20 anywhere
DROP all – 220.181.45.112 anywhere
DROP all – 220.166.132.53 anywhere
DROP all – 220.165.28.67 anywhere
DROP all – 219.239.98.225 anywhere
DROP all – bj141-189-213.bjtelecom.net anywhere
DROP all – 219.139.108.134 anywhere
DROP all – 218-38-19-120.youiwe.co.kr anywhere
DROP all – 218.240.128.203 anywhere
DROP all – host236-88-static.27-217-b.business.telecomitalia.it anywhere
DROP all – genf153.server4you.de anywhere
DROP all – p15132454.pureserver.info anywhere
DROP all – 217.15.39.139 anywhere
DROP all – 216.17.110.234 anywhere
DROP all – 211.233.89.237 anywhere
DROP all – 211.155.131.2 anywhere
DROP all – 211.152.9.114 anywhere
DROP all – 210.71.198.8 anywhere
DROP all – 210.212.150.232 anywhere
DROP all – 210.211.97.167 anywhere
DROP all – 210.211.97.166 anywhere
DROP all – coadyj1.vpslink.com anywhere
DROP all – computersand.com anywhere
DROP all – 189-247-115-208.static.reverse.lstn.net anywhere
DROP all – ec2-204-236-235-245.compute-1.amazonaws.com anywhere
DROP all – mia.crdusa.net anywhere
DROP all – net133-230.paichai.ac.kr anywhere
DROP all – 203.162.141.8 anywhere
DROP all – 203-144-133-38.static.asianet.co.th anywhere
DROP all – 203.129.203.4 anywhere
DROP all – nagios.ranksitt.net anywhere
DROP all – 202.28.248.242 anywhere
DROP all – 202.129.35.98 anywhere
DROP all – 178.bajanet.mx anywhere
DROP all – cablesoft.tv anywhere
DROP all – 200.24.102.242 anywhere
DROP all – 200.198.68.227 anywhere
DROP all – mail.santiagonet.com.br anywhere
DROP all – IP104.drd.ufpr.br anywhere
DROP all – ibi.metrocom.ru anywhere
DROP all – adsl-074-189-117-098.sip.bhm.bellsouth.net anywhere
DROP all – 113-21-225-58.c.hd.net.nz anywhere
DROP all – 202.100.80.21 anywhere
DROP all – 242-136-static.mxserver.ro anywhere
DROP all – server1.entaros.com anywhere
DROP all – usvr35.triv.nl anywhere
DROP all – dns2.pavianetwork.com anywhere
DROP all – institut-mladeze1-sh2.customer.vol.cz anywhere
DROP all – 125.248.104.135 anywhere
DROP all – 194.50.125.10 anywhere
DROP all – ns.siirt.edu.tr anywhere
DROP all – grillsport-affalterbach.de anywhere
DROP all – 190.144.113.123 anywhere
DROP all – loft4992.serverloft.com anywhere
DROP all – 187-51-143-154.customer.tdatabrasil.net.br anywhere
DROP all – mail.aerorex.com anywhere
DROP all – mail.mallwork.com.ec anywhere
DROP all – bacd4dc5.virtua.com.br anywhere
DROP all – rrcs-184-75-54-226.nyc.biz.rr.com anywhere
DROP all – 183178117021.ctinets.com anywhere
DROP all – 178-238-133-206.hostnoc.eu anywhere
DROP all – 178-211-33-66.turkrdns.com anywhere
DROP all – 173.234.148.162.rdns.ubiquityservers.com anywhere
DROP all – 173.226.228.231 anywhere
DROP all – ip-173-201-45-213.ip.secureserver.net anywhere
DROP all – 173.0.54.185 anywhere
DROP all – 173.0.51.7 anywhere
DROP all – 152.46.13.230 anywhere
DROP all – disturbed-2.grid.pub.ro anywhere
DROP all – 141.85.224.232 anywhere
DROP all – srv8.cclassiphosting.com anywhere
DROP all – 125.18.60.253 anywhere
DROP all – 125.152.96.154 anywhere
DROP all – 124.207.216.253 anywhere
DROP all – 124.205.190.217 anywhere
DROP all – 122.227.22.52 anywhere
DROP all – 121.14.195.83 anywhere
DROP all – www.onyx-international.com anywhere
DROP all – 119.196.21.224 anywhere
DROP all – 119.188.7.169 anywhere
DROP all – 119.188.7.145 anywhere
DROP all – 118.219.234.163 anywhere
DROP all – 91.227.55.116.broad.km.yn.dynamic.163data.com.cn anywhere
DROP all – 116.125.70.150 anywhere
DROP all – 115.238.31.39 anywhere
DROP all – 115.236.99.195 anywhere
DROP all – 115.160.128.103 anywhere
DROP all – 114.80.111.135 anywhere
DROP all – 114.203.87.101 anywhere
DROP all – 112.78.182.20 anywhere
DROP all – 112.172.129.87 anywhere
DROP all – 112.140.186.138 anywhere
DROP all – 111.75.199.11 anywhere
DROP all – 109.235.51.129 anywhere
DROP all – 109.169.61.114 anywhere
Und die Plain-IP Liste dazu:
109.169.61.114
109.235.51.129
111.75.199.11
112.140.186.138
112.172.129.87
112.78.182.20
113.21.225.58
114.203.87.101
114.80.111.135
115.160.128.103
115.236.99.195
115.238.31.39
116.125.70.150
116.55.227.91
118.219.234.163
119.188.7.145
119.188.7.169
119.196.21.224
121.14.195.176
121.14.195.83
122.227.22.52
124.205.190.217
124.207.216.253
125.152.96.154
125.18.60.253
125.248.104.135
129.121.63.6
141.85.224.232
141.85.241.234
152.46.13.230
173.0.51.7
173.0.54.185
173.201.45.213
173.226.228.231
173.234.148.162
178.211.33.66
178.238.133.206
183.178.117.21
184.75.54.226
186.205.77.197
186.3.66.134
186.4.3.205
187.51.143.154
188.138.48.87
190.144.113.123
193.192.58.113
194.27.146.1
194.50.125.10
195.122.208.101
195.5.154.130
200.17.208.104
200.180.136.243
200.198.68.227
200.24.102.242
200.68.122.221
201.159.177.178
202.100.80.21
202.129.35.98
202.28.248.242
202.40.176.40
203.129.203.4
203.144.133.38
203.162.141.8
203.250.133.230
204.13.3.132
204.236.235.245
208.115.247.189
209.59.13.50
209.59.223.211
210.211.97.166
210.211.97.167
210.212.150.232
210.71.198.8
211.152.9.114
211.155.131.2
211.233.89.237
216.17.110.234
217.15.39.139
217.160.178.11
217.172.184.70
217.27.88.236
218.240.128.203
218.38.19.120
219.139.108.134
219.141.189.213
219.239.98.225
220.165.28.67
220.166.132.53
220.181.45.112
221.195.72.20
222.221.88.88
222.35.142.100
222.35.31.195
38.99.168.120
41.21.129.164
49.212.4.157
49.212.54.175
58.137.18.109
58.221.206.161
59.108.54.66
59.34.131.95
60.13.129.139
61.145.118.190
61.150.72.170
61.151.238.131
61.152.76.4
62.233.157.101
62.68.253.220
64.17.70.19
64.182.71.9
64.34.169.208
66.134.42.22
67.159.35.60
67.23.225.195
67.23.5.45
67.79.3.218
68.166.80.15
69.10.58.140
69.162.114.90
69.162.74.170
70.85.249.226
72.45.251.107
72.55.164.79
74.189.117.98
74.201.86.168
74.208.155.171
74.50.87.170
74.52.29.60
74.52.8.138
77.246.181.218
77.92.138.6
78.109.12.4
78.111.99.76
78.129.232.10
78.46.80.180
79.142.79.10
79.172.195.193
80.72.40.170
80.82.152.30
80.84.243.147
80.93.214.226
81.95.156.202
83.157.4.52
84.253.142.220
84.254.195.57
85.114.128.40
85.114.130.74
85.114.132.142
85.114.137.118
85.17.174.203
85.17.19.21
85.17.87.14
85.214.74.36
85.25.149.34
85.88.195.35
88.191.16.177
88.198.16.203
88.198.9.228
88.255.63.117
89.47.228.51
89.97.238.206
91.201.66.76
91.209.238.2
91.214.45.133
91.224.160.146
92.241.168.90
92.243.78.170
94.137.254.94
94.23.199.51
94.23.214.53
94.50.220.57
94.60.136.242
95.110.224.74
95.131.67.64
95.141.35.231
95.168.183.134
Loading ...