Some Website Changes thanks to Botnets

Lately I’ve been getting tons and tons of login attempts from what appear to be botnets.  Since I’m getting tired of banning the IPs individually, I’m temporary taking to banning entire countries and ISP’s from hitting my blog.  If you’re in that group, sorry guys.  Take it up with your ISP.

Here are some stats I’ve been gathering.

IP Addresses Grouped by ISPs ab connect ltd. astral telecom sa bezeq international-ltd chandigarh china unicom zhejiang province network chinanet guangdong province network chl citycom networks pvt ltd codero comsenz technology ltd dedibox sas desenvolve solucoes de internet ltda desokey mohamed hassan centerarabs ecommerce corporation erfahren co. ltd. faan international fiberring b.v. forest eternal communication tech. fpt telecom company gigahost limited globotech communications go daddy netherlands b.v. llc llc llc llc llc llc llc llc h1 llc h1 llc hetzner online ag hetzner online ag ho chi minh city post and telecom company host papa inc. inc hostigation iomart hosting limited ip pool for ctrls ipx server gmbh itsoft ltd iweb dedicated cl leaseweb germany gmbh limestone networks inc linode linode llc lubos hutar mainstream consulting group inc media temple inc media temple inc media temple inc. media temple inc. memset ltd nap de las americas-madrid s.a. neocom-service isp new dream network llc nixway srl onesolutions online data services jsc online s.a.s. openminds bvba ovh hosting inc ovh sas ovh sas ovh sas ovh sas ovh sas ovh sas ovh sas ovh sas ovh sas privatesystems networks proserve b.v. pt. cyberindo aditama pt. des teknologi informasi radore veri merkezi hizmetleri a.s. rcs & rds business salay telekomunikasyon ticaret limited sirketi sc eurosistem srl sc webfactor srl serverbeach serverspace limited singlehop inc singlehop inc singlehop inc skyware sp. z o.o. soc. comercial wirenet chile ltda. softcom america inc. softcom america inc. softlayer technologies inc strato ag strato ag strato ag teknik data internet teknolojileri sti tolvu- og rafeindapjonusta sudurlands ehf turk telekomunikasyon anonim sirketi vietnam data communication company vietnam data communication company webfusion internet solutions webfusion internet solutions webfusion internet solutions xenosite b.v.

As you can see, I get a bunch from Godaddy and French ISP Ovh.  I’ve also banned Godaddy IP’s, Ovh, and Media Temple.  I’ll be adding others once I find all of their allocated net ranges.

For reference, here’s a copy of my current list along with attempts:

IPs Attempts 34 26 20 1 3 12 1 63 1 8 16 23 26 43 12 3 232 5 13 34 52 53 43 87 1 4 1 12 1 1 18 1 6 33 81 27 14 6 9 28 112 18 3 180 6 46 61 7 19 13 2 32 24 48 13 83 244 39 19 1 3 1 4 8 46 58 1 4 27 175 1 1 58 2 20 36
Total Attempts: 2469

Guess I should be flattered that I’m getting all of this “attention” 🙂