Jul 11, 2016 11:03 PM
(This post was last modified: Nov 5, 2016 03:06 PM by Gigabear.)
These IPs get you abuse complaints when you scan with zmap or something similar. Put these in your blacklists file when scanning (cidr notation). Continuation of https://hackforums.net/showthread.php?tid=5019913
= UPDATED (AGGRESIVE) BLACKLIST LIST =
http://pastebin.com/raw/1YQej4sV
Keep in mind that the above list is extremely aggressive and aims at reducing abuse complaints by a lot. It includes known honeypots, universities & schools, as well as government institutions.
DO NOT DEAL WITH THIS MEMBER
yes all hail lord plt.
may i know how you came to the conclusion these were bad ranges btw?
Thanks mate rightyo but why is PLT banned?
DO NOT DEAL WITH THIS MEMBER
(Jul 12, 2016 07:54 AM)~Jamie Wrote: Thanks mate rightyo but why is PLT banned?
for no reason what so ever.
(Jul 12, 2016 04:04 AM)YsBk Dervint Wrote: yes all hail lord plt.
may i know how you came to the conclusion these were bad ranges btw? I'm wondering the same :)
(Jul 12, 2016 09:47 AM)Swish Wrote: I'm wondering the same :)
He was a general shitposter that didn't care about his account is seemed. I came to these ranges after getting abuse complaints for them over and over. I just did an overnight scan and I have 0 abuse complaints with this new config.
DO NOT DEAL WITH THIS MEMBER
(Jul 12, 2016 12:20 PM)Gigabear Wrote: He was a general shitposter that didn't care about his account is seemed. I came to these ranges after getting abuse complaints for them over and over. I just did an overnight scan and I have 0 abuse complaints with this new config.
that hurt :(
DO NOT DEAL WITH THIS MEMBER
(Jul 12, 2016 12:20 PM)Gigabear Wrote: He was a general shitposter that didn't care about his account is seemed. I came to these ranges after getting abuse complaints for them over and over. I just did an overnight scan and I have 0 abuse complaints with this new config.
assuming 'config' is in your iptables?
and thanks for the range share
(Jul 12, 2016 02:32 PM)Knowledgeable Wrote: assuming 'config' is in your iptables?
and thanks for the range share
No in my blacklists.conf.
DO NOT DEAL WITH THIS MEMBER
(Jul 12, 2016 02:32 PM)Knowledgeable Wrote: assuming 'config' is in your iptables?
and thanks for the range share
no, most likely he just uses a text file containing the ranges on zmap.
DO NOT DEAL WITH THIS MEMBER
(Jul 12, 2016 02:33 PM)Gigabear Wrote: No in my blacklists.conf.
(Jul 12, 2016 02:33 PM)YsBk Dervint Wrote: no, most likely he just uses a text file containing the ranges on zmap.
ok, also good idea(s).
both methods can stop equally i suppose
(Jul 12, 2016 02:37 PM)Knowledgeable Wrote: ok, also good idea(s).
both methods can stop equally i suppose
Thanks you chicken nugget.
Thanks alot for this HQ post!!!
DO NOT DEAL WITH THIS MEMBER
I just received multiple complaints and my server provider suspended my hosting.
Watch out for 198
(Jul 13, 2016 10:03 PM)Valeant Wrote: I just received multiple complaints and my server provider suspended my hosting.
Watch out for 198
Pretty sure you're joking but for future reference this config isn't bulletproof, it just aims to prevent less abuse.
|