David A. Windham
david
/
custom.d
1
0
Fork 0
Files
Tree: 9bd720b041
Branches Tags
custom.d
/
blacklist-ips.conf

blacklist-ips.conf 8.2 KB
History Raw

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217 
  1. # EDIT THIS FILE AS YOU LIKE TO ADD OR REMOVE ANY BAD IP ADDRESSES OR IP RANGES YOU WANT TO BLOCK ###
    2. 

  2. 

  3. ##############################################################################
    4. 

  4. #        ___                 __                                              #
    5. 

  5. #       / _ | ___  ___ _____/ /  ___                                         #
    6. 

  6. #      / __ |/ _ \/ _ `/ __/ _ \/ -_)                                        #
    7. 

  7. #     /_/ |_/ .__/\_,_/\__/_//_/\__/                                         #
    8. 

  8. #        __/_/        __   ___       __     ___  __         __               #
    9. 

  9. #       / _ )___ ____/ /  / _ )___  / /_   / _ )/ /__  ____/ /_____ ____     #
    10. 

  10. #      / _  / _ `/ _  /  / _  / _ \/ __/  / _  / / _ \/ __/  '_/ -_) __/     #
    11. 

  11. #     /____/\_,_/\_,_/  /____/\___/\__/  /____/_/\___/\__/_/\_\\__/_/        #
    12. 

  12. #                                                                            #
    13. 

  13. ##############################################################################
    14. 

  14. 

  15. 

  16. #######################################
    17. 

  17. ########## CUSTOM for dev.dw ##########
    18. 

  18. #######################################
    19. 

  19. 

  20. Require not ip 5.101.0.209
    21. 

  21. 

  22. ## zgrab scanner
    23. 

  23. Require not ip 83.97.20.36
    24. 

  24. Require not ip 162.243.129.33
    25. 

  25. 

  26. ## polaris botnet
    27. 

  27. Require not ip 186.183.182.13
    28. 

  28. Require not ip 219.77.156.213
    29. 

  29. Require not ip 121.162.47.210
    30. 

  30. 

  31. 

  32. 

  33. # This is merely an example and gets auto included as since Version 2.2017.05 introduced on 2017-04-19
    34. 

  34. # This file must exist on your system or Apache will fail a reload due to a missing file
    35. 

  35. # For all intents and purposes you can delete everything inside this file and leave it
    36. 

  36. # completely blank if you do not want your Apache Blocker to do any blocking of bad IP's
    37. 

  37. 

  38. Require not ip 104.223.37.150
    39. 

  39. Require not ip 104.5.92.27
    40. 

  40. Require not ip 107.150.63.170
    41. 

  41. Require not ip 109.236.83.247
    42. 

  42. Require not ip 137.74.49.205
    43. 

  43. Require not ip 137.74.49.208
    44. 

  44. Require not ip 146.0.74.150
    45. 

  45. Require not ip 148.251.54.44
    46. 

  46. Require not ip 149.56.151.180
    47. 

  47. Require not ip 149.56.232.146
    48. 

  48. Require not ip 150.70.0.0/16
    49. 

  49. Require not ip 151.80.27.90
    50. 

  50. Require not ip 151.80.99.90
    51. 

  51. Require not ip 151.80.99.91
    52. 

  52. Require not ip 154.16.199.144
    53. 

  53. Require not ip 154.16.199.34
    54. 

  54. Require not ip 154.16.199.48
    55. 

  55. Require not ip 154.16.199.78
    56. 

  56. Require not ip 158.69.142.34
    57. 

  57. Require not ip 166.62.80.172
    58. 

  58. Require not ip 173.212.192.219
    59. 

  59. Require not ip 173.234.11.105
    60. 

  60. Require not ip 173.234.153.106
    61. 

  61. Require not ip 173.234.153.30
    62. 

  62. Require not ip 173.234.175.68
    63. 

  63. Require not ip 173.234.31.9
    64. 

  64. Require not ip 173.234.38.25
    65. 

  65. Require not ip 176.126.245.213
    66. 

  66. Require not ip 178.238.234.1
    67. 

  67. Require not ip 185.35.63.128
    68. 

  68. Require not ip 185.100.87.238
    69. 

  69. Require not ip 185.115.125.99
    70. 

  70. Require not ip 185.119.81.11
    71. 

  71. Require not ip 185.119.81.63
    72. 

  72. Require not ip 185.119.81.77
    73. 

  73. Require not ip 185.119.81.78
    74. 

  74. Require not ip 185.130.225.65
    75. 

  75. Require not ip 185.130.225.66
    76. 

  76. Require not ip 185.130.225.83
    77. 

  77. Require not ip 185.130.225.90
    78. 

  78. Require not ip 185.130.225.94
    79. 

  79. Require not ip 185.130.225.95
    80. 

  80. Require not ip 185.130.226.105
    81. 

  81. Require not ip 185.153.197.103
    82. 

  82. Require not ip 185.159.36.6
    83. 

  83. Require not ip 185.183.96.33
    84. 

  84. Require not ip 185.47.62.199
    85. 

  85. Require not ip 185.62.190.38
    86. 

  86. Require not ip 185.70.105.161
    87. 

  87. Require not ip 185.70.105.164
    88. 

  88. Require not ip 185.85.239.156
    89. 

  89. Require not ip 185.85.239.157
    90. 

  90. Require not ip 185.86.13.213
    91. 

  91. Require not ip 185.86.5.199
    92. 

  92. Require not ip 185.86.5.212
    93. 

  93. Require not ip 185.92.72.88
    94. 

  94. Require not ip 185.93.185.11
    95. 

  95. Require not ip 185.93.185.12
    96. 

  96. Require not ip 188.209.52.101
    97. 

  97. Require not ip 190.152.223.27
    98. 

  98. Require not ip 191.96.249.29
    99. 

  99. Require not ip 192.69.89.173
    100. 

  100. Require not ip 193.201.224.205
    101. 

  101. Require not ip 195.154.183.190
    102. 

  102. Require not ip 195.229.241.174
    103. 

  103. Require not ip 200.7.105.43
    104. 

  104. Require not ip 210.212.194.60
    105. 

  105. Require not ip 216.218.147.194
    106. 

  106. Require not ip 220.227.234.129
    107. 

  107. Require not ip 23.253.230.158
    108. 

  108. Require not ip 23.89.159.176
    109. 

  109. Require not ip 31.170.160.209
    110. 

  110. Require not ip 45.32.186.11
    111. 

  111. Require not ip 45.76.21.179
    112. 

  112. Require not ip 46.249.38.145
    113. 

  113. Require not ip 46.249.38.146
    114. 

  114. Require not ip 46.249.38.148
    115. 

  115. Require not ip 46.249.38.149
    116. 

  116. Require not ip 46.249.38.150
    117. 

  117. Require not ip 46.249.38.151
    118. 

  118. Require not ip 46.249.38.152
    119. 

  119. Require not ip 46.249.38.153
    120. 

  120. Require not ip 46.249.38.154
    121. 

  121. Require not ip 46.249.38.159
    122. 

  122. Require not ip 51.255.172.22
    123. 

  123. Require not ip 5.39.218.232
    124. 

  124. Require not ip 5.39.219.24
    125. 

  125. Require not ip 5.39.222.18
    126. 

  126. Require not ip 5.39.223.134
    127. 

  127. Require not ip 54.213.16.154
    128. 

  128. Require not ip 54.213.9.111
    129. 

  129. Require not ip 62.210.146.49
    130. 

  130. Require not ip 62.210.88.4
    131. 

  131. Require not ip 65.98.91.181
    132. 

  132. Require not ip 69.162.124.237
    133. 

  133. Require not ip 69.64.147.24
    134. 

  134. Require not ip 72.8.183.202
    135. 

  135. Require not ip 77.247.178.191
    136. 

  136. Require not ip 77.247.178.47
    137. 

  137. Require not ip 77.247.181.219
    138. 

  138. Require not ip 78.31.184.0/21
    139. 

  139. Require not ip 78.31.211.0/24
    140. 

  140. Require not ip 79.110.128.17
    141. 

  141. Require not ip 79.110.128.63
    142. 

  142. Require not ip 79.110.128.252
    143. 

  143. Require not ip 79.110.128.128
    144. 

  144. Require not ip 80.87.205.10
    145. 

  145. Require not ip 80.87.205.11
    146. 

  146. Require not ip 85.17.230.23
    147. 

  147. Require not ip 85.17.26.68
    148. 

  148. Require not ip 91.185.190.172
    149. 

  149. Require not ip 91.200.12.0/22
    150. 

  150. Require not ip 91.200.12.15
    151. 

  151. Require not ip 91.200.12.49
    152. 

  152. Require not ip 91.200.12.91
    153. 

  153. Require not ip 92.222.66.137
    154. 

  154. Require not ip 93.104.209.11
    155. 

  155. Require not ip 93.158.200.103
    156. 

  156. Require not ip 93.158.200.105
    157. 

  157. Require not ip 93.158.200.115
    158. 

  158. Require not ip 93.158.200.124
    159. 

  159. Require not ip 93.158.200.126
    160. 

  160. Require not ip 93.158.200.66
    161. 

  161. Require not ip 93.158.200.68
    162. 

  162. Require not ip 93.238.202.44
    163. 

  163. 

  164. # Cyveillance / Qwest Communications / PSINET
    165. 

  165. # *******************************************
    166. 

  166. # I am extensively researching this subject - appears to be US government involved
    167. 

  167. # and also appears to be used by all sorts of law enforcement agencies. For one they
    168. 

  168. # do not obey robots.txt and continually disguise their User-Agent strings. Time will
    169. 

  169. # tell if this is all correct or not.
    170. 

  170. # For now see - https://en.wikipedia.org/wiki/Cyveillance
    171. 

  171. 

  172. # IMPORTANT UPDATE ON Cyveillance / Qwest Communications !!!
    173. 

  173. # **********************************************************
    174. 

  174. # I have done a lot of research on Cyveillance now and through monitoring my logs I know
    175. 

  175. # for sure what companies are using them and what they are actually looking for.
    176. 

  176. # My research has led me to understand that Cyveillance services are used by hundreds
    177. 

  177. # of companies to help them dicsover theft of copyrighted materials like images, movies
    178. 

  178. # music and other materials. I personally believe a lot of block lists who originally recommended
    179. 

  179. # blocking Cyveillance have done so to protect their torrent or p2p sites from being scanned.
    180. 

  180. # I personally have now unblocked them as image theft is a big problem of mine but if you
    181. 

  181. # do want to allow Cyveillance you can simply modify the entries in the below from "Require not ip" to "Require ip"
    182. 

  182. # Getty Images is one such company who appears to use Cyveillance to help monitor for copyright theft.
    183. 

  183. 

  184. # Use this section at YOUR OWN RISK, you may block some legitimate networks but after many hours of
    185. 

  185. # Research this is now the completely updated list of all IP ranges IPV4 and IPV6 owned Qwest Communications
    186. 

  186. # PSINET and Cyveillance.
    187. 

  187. 

  188. # IMPORTANT NOTE: If you really want to keeps bot and things out of certain parts of your web site
    189. 

  189. # Rather implement a comlex Google Re-Captcha to reach sections of your sites and for people to be able
    190. 

  190. # to access download links. Google Re-Captcha with images is too complex for any bot.
    191. 

  191. 

  192. # Only uncomment the lines below if you want to block these ranges otherwise rather just leave it as is.
    193. 

  193. 

  194. #Require not ip 4.17.135.32/27
    195. 

  195. #Require not ip 38.0.0.0/8
    196. 

  196. #Require not ip 63.144.0.0/13
    197. 

  197. #Require not ip 65.112.0.0/12
    198. 

  198. #Require not ip 65.192.0.0/11
    199. 

  199. #Require not ip 206.2.138.0/23
    200. 

  200. #Require not ip 208.71.164.0/22
    201. 

  201. 

  202. # BERKELEY SCANNER
    203. 

  203. # ****************
    204. 

  204. # The Berkeley University has a scanner testing all over the web sending a complex
    205. 

  205. # payload an expecting a reply from servers who are infected or who just respond to such
    206. 

  206. # a payload. The payload looks similar to this
    207. 

  207. # "$\xC9\xE1\xDC\x9B+\x8F\x1C\xE71\x99\xA8\xDB6\x1E#\xBB\x19#Hx\xA7\xFD\x0F9-"
    208. 

  208. # and is sometime VERY long. You may have noticed this in your logs.
    209. 

  209. # I support research projects and all my servers respond with an error to this type of
    210. 

  210. # string so I do not block them but if you want to block just uncomment the following line
    211. 

  211. # or email them asking them not to scan your server. They do respond.
    212. 

  212. # Visit http://169.229.3.91/ for more info
    213. 

  213. 

  214. # If you really do want to block them uncomment the line below.
    215. 

  215. 

  216. #Require not ip 169.229.3.88/29
    217. 

  217.