{"id":311,"date":"2014-07-23T20:07:15","date_gmt":"2014-07-24T00:07:15","guid":{"rendered":"http:\/\/brian.digitalmaddox.com\/blog\/?p=311"},"modified":"2014-07-23T20:07:15","modified_gmt":"2014-07-24T00:07:15","slug":"some-website-changes-thanks-to-botnets","status":"publish","type":"post","link":"https:\/\/brian.digitalmaddox.com\/blog\/?p=311","title":{"rendered":"Some Website Changes thanks to Botnets"},"content":{"rendered":"

Lately I’ve been getting tons and tons of login attempts from what appear to be botnets.\u00a0 Since I’m getting tired of banning the IPs individually, I’m temporary taking to banning entire countries and ISP’s from hitting my blog.\u00a0 If you’re in that group, sorry guys.\u00a0 Take it up with your ISP.<\/p>\n

Here are some stats I’ve been gathering.<\/p>\n

IP Addresses Grouped by ISPs<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
217.16.9.99<\/td>\nab connect<\/span><\/td>\n<\/tr>\n
174.142.104.207<\/td>\nangmalta.net ltd.<\/span><\/td>\n<\/tr>\n
80.97.64.148<\/td>\nastral telecom sa<\/span><\/td>\n<\/tr>\n
79.182.60.204<\/td>\nbezeq international-ltd<\/span><\/td>\n<\/tr>\n
112.196.2.36<\/td>\nchandigarh<\/span><\/td>\n<\/tr>\n
60.12.119.200<\/td>\nchina unicom zhejiang province network<\/span><\/td>\n<\/tr>\n
14.147.73.105<\/td>\nchinanet guangdong province network<\/span><\/td>\n<\/tr>\n
216.222.148.52<\/td>\nchl<\/span><\/td>\n<\/tr>\n
119.82.71.107<\/td>\ncitycom networks pvt ltd<\/span><\/td>\n<\/tr>\n
69.64.65.10<\/td>\ncodero<\/span><\/td>\n<\/tr>\n
203.195.184.151<\/td>\ncomsenz technology ltd<\/span><\/td>\n<\/tr>\n
88.190.45.37<\/td>\ndedibox sas<\/span><\/td>\n<\/tr>\n
177.70.21.29<\/td>\ndesenvolve solucoes de internet ltda<\/span><\/td>\n<\/tr>\n
176.9.195.105<\/td>\ndesokey mohamed hassan centerarabs<\/span><\/td>\n<\/tr>\n
66.147.235.81<\/td>\ndotblock.com<\/span><\/td>\n<\/tr>\n
166.63.127.244<\/td>\necommerce corporation<\/span><\/td>\n<\/tr>\n
122.213.243.131<\/td>\nerfahren co. ltd.<\/span><\/td>\n<\/tr>\n
198.50.112.114<\/td>\nfaan international<\/span><\/td>\n<\/tr>\n
50.7.139.53<\/td>\nfdcservers.net<\/span><\/td>\n<\/tr>\n
87.255.57.169<\/td>\nfiberring b.v.<\/span><\/td>\n<\/tr>\n
42.62.24.250<\/td>\nforest eternal communication tech. co.ltd<\/span><\/td>\n<\/tr>\n
216.98.196.14<\/td>\nforethought.net<\/span><\/td>\n<\/tr>\n
42.112.19.220<\/td>\nfpt telecom company<\/span><\/td>\n<\/tr>\n
117.18.73.66<\/td>\ngigahost limited<\/span><\/td>\n<\/tr>\n
67.215.7.226<\/td>\nglobotech communications<\/span><\/td>\n<\/tr>\n
188.121.62.249<\/td>\ngo daddy netherlands b.v.<\/span><\/td>\n<\/tr>\n
118.139.162.178<\/td>\ngodaddy.com<\/span><\/td>\n<\/tr>\n
50.62.41.168<\/td>\ngodaddy.com llc<\/span><\/td>\n<\/tr>\n
50.63.57.211<\/td>\ngodaddy.com llc<\/span><\/td>\n<\/tr>\n
50.63.85.76<\/td>\ngodaddy.com llc<\/span><\/td>\n<\/tr>\n
50.63.130.155<\/td>\ngodaddy.com llc<\/span><\/td>\n<\/tr>\n
50.63.141.164<\/td>\ngodaddy.com llc<\/span><\/td>\n<\/tr>\n
97.74.127.145<\/td>\ngodaddy.com llc<\/span><\/td>\n<\/tr>\n
184.168.109.23<\/td>\ngodaddy.com llc<\/span><\/td>\n<\/tr>\n
184.168.112.26<\/td>\ngodaddy.com llc<\/span><\/td>\n<\/tr>\n
188.64.170.221<\/td>\nh1 llc<\/span><\/td>\n<\/tr>\n
188.64.171.181<\/td>\nh1 llc<\/span><\/td>\n<\/tr>\n
5.9.121.109<\/td>\nhetzner online ag<\/span><\/td>\n<\/tr>\n
46.4.20.133<\/td>\nhetzner online ag<\/span><\/td>\n<\/tr>\n
221.132.33.175<\/td>\nho chi minh city post and telecom company<\/span><\/td>\n<\/tr>\n
69.28.199.40<\/td>\nhost papa inc.<\/span><\/td>\n<\/tr>\n
184.171.240.27<\/td>\nhostdime.com inc<\/span><\/td>\n<\/tr>\n
69.85.84.194<\/td>\nhostigation<\/span><\/td>\n<\/tr>\n
82.145.45.104<\/td>\niomart hosting limited<\/span><\/td>\n<\/tr>\n
182.18.175.246<\/td>\nip pool for ctrls<\/span><\/td>\n<\/tr>\n
212.112.232.106<\/td>\nipx server gmbh<\/span><\/td>\n<\/tr>\n
195.93.180.34<\/td>\nitsoft ltd<\/span><\/td>\n<\/tr>\n
64.15.138.14<\/td>\niweb dedicated cl<\/span><\/td>\n<\/tr>\n
46.165.206.78<\/td>\nleaseweb germany gmbh<\/span><\/td>\n<\/tr>\n
64.31.25.60<\/td>\nlimestone networks inc<\/span><\/td>\n<\/tr>\n
173.255.217.143<\/td>\nlinode<\/span><\/td>\n<\/tr>\n
106.187.47.170<\/td>\nlinode llc<\/span><\/td>\n<\/tr>\n
188.191.53.8<\/td>\nlubos hutar<\/span><\/td>\n<\/tr>\n
64.202.240.136<\/td>\nmainstream consulting group inc<\/span><\/td>\n<\/tr>\n
64.207.147.191<\/td>\nmedia temple inc<\/span><\/td>\n<\/tr>\n
70.32.107.181<\/td>\nmedia temple inc<\/span><\/td>\n<\/tr>\n
205.186.142.240<\/td>\nmedia temple inc.<\/span><\/td>\n<\/tr>\n
216.70.68.242<\/td>\nmedia temple inc.<\/span><\/td>\n<\/tr>\n
89.200.138.207<\/td>\nmemset ltd<\/span><\/td>\n<\/tr>\n
85.112.29.210<\/td>\nnap de las americas-madrid s.a.<\/span><\/td>\n<\/tr>\n
212.82.217.9<\/td>\nneocom-service isp<\/span><\/td>\n<\/tr>\n
69.163.164.235<\/td>\nnew dream network llc<\/span><\/td>\n<\/tr>\n
85.204.118.142<\/td>\nnixway srl<\/span><\/td>\n<\/tr>\n
41.190.76.5<\/td>\nonesolutions<\/span><\/td>\n<\/tr>\n
125.253.118.46<\/td>\nonline data services jsc<\/span><\/td>\n<\/tr>\n
212.83.164.81<\/td>\nonline s.a.s.<\/span><\/td>\n<\/tr>\n
88.151.245.66<\/td>\nopenminds bvba<\/span><\/td>\n<\/tr>\n
142.4.208.97<\/td>\novh hosting inc<\/span><\/td>\n<\/tr>\n
5.39.106.19<\/td>\novh sas<\/span><\/td>\n<\/tr>\n
5.135.165.206<\/td>\novh sas<\/span><\/td>\n<\/tr>\n
5.135.188.80<\/td>\novh sas<\/span><\/td>\n<\/tr>\n
37.59.29.48<\/td>\novh sas<\/span><\/td>\n<\/tr>\n
37.59.35.4<\/td>\novh sas<\/span><\/td>\n<\/tr>\n
37.187.67.49<\/td>\novh sas<\/span><\/td>\n<\/tr>\n
46.105.105.58<\/td>\novh sas<\/span><\/td>\n<\/tr>\n
91.121.86.86<\/td>\novh sas<\/span><\/td>\n<\/tr>\n
188.165.202.118<\/td>\novh sas<\/span><\/td>\n<\/tr>\n
162.211.82.114<\/td>\nprivatesystems networks<\/span><\/td>\n<\/tr>\n
83.96.132.85<\/td>\nproserve b.v.<\/span><\/td>\n<\/tr>\n
210.210.178.20<\/td>\npt. cyberindo aditama<\/span><\/td>\n<\/tr>\n
112.78.44.28<\/td>\npt. des teknologi informasi<\/span><\/td>\n<\/tr>\n
31.210.117.13<\/td>\nradore veri merkezi hizmetleri a.s.<\/span><\/td>\n<\/tr>\n
82.79.27.158<\/td>\nrcs & rds business<\/span><\/td>\n<\/tr>\n
185.9.157.31<\/td>\nsalay telekomunikasyon ticaret limited sirketi<\/span><\/td>\n<\/tr>\n
89.47.253.2<\/td>\nsc eurosistem srl<\/span><\/td>\n<\/tr>\n
46.102.232.243<\/td>\nsc webfactor srl<\/span><\/td>\n<\/tr>\n
64.34.173.227<\/td>\nserverbeach<\/span><\/td>\n<\/tr>\n
31.24.36.35<\/td>\nserverspace limited<\/span><\/td>\n<\/tr>\n
69.175.111.218<\/td>\nsinglehop inc<\/span><\/td>\n<\/tr>\n
108.178.57.146<\/td>\nsinglehop inc<\/span><\/td>\n<\/tr>\n
173.236.21.58<\/td>\nsinglehop inc<\/span><\/td>\n<\/tr>\n
91.189.219.107<\/td>\nskyware sp. z o.o.<\/span><\/td>\n<\/tr>\n
190.107.177.102<\/td>\nsoc. comercial wirenet chile ltda.<\/span><\/td>\n<\/tr>\n
108.59.252.133<\/td>\nsoftcom america inc.<\/span><\/td>\n<\/tr>\n
108.59.254.26<\/td>\nsoftcom america inc.<\/span><\/td>\n<\/tr>\n
50.97.138.111<\/td>\nsoftlayer technologies inc<\/span><\/td>\n<\/tr>\n
85.214.27.40<\/td>\nstrato ag<\/span><\/td>\n<\/tr>\n
85.214.64.100<\/td>\nstrato ag<\/span><\/td>\n<\/tr>\n
85.214.153.62<\/td>\nstrato ag<\/span><\/td>\n<\/tr>\n
46.235.9.199<\/td>\nteknik data internet teknolojileri san.tic.ltd. sti<\/span><\/td>\n<\/tr>\n
37.205.32.122<\/td>\ntolvu- og rafeindapjonusta sudurlands ehf<\/span><\/td>\n<\/tr>\n
95.0.26.85<\/td>\nturk telekomunikasyon anonim sirketi<\/span><\/td>\n<\/tr>\n
123.30.208.178<\/td>\nvietnam data communication company<\/span><\/td>\n<\/tr>\n
222.255.29.39<\/td>\nvietnam data communication company<\/span><\/td>\n<\/tr>\n
37.122.210.63<\/td>\nwebfusion internet solutions<\/span><\/td>\n<\/tr>\n
91.109.3.166<\/td>\nwebfusion internet solutions<\/span><\/td>\n<\/tr>\n
212.48.67.110<\/td>\nwebfusion internet solutions<\/span><\/td>\n<\/tr>\n
192.254.202.144<\/td>\nwebsitewelcome.com<\/span><\/td>\n<\/tr>\n
62.212.130.150<\/td>\nxenosite b.v.<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

As you can see, I get a bunch from Godaddy and French ISP Ovh.\u00a0 I’ve also banned Godaddy IP’s, Ovh, and Media Temple.\u00a0 I’ll be adding others once I find all of their allocated net ranges.<\/p>\n

For reference, here’s a copy of my current list along with attempts:<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
IPs<\/span><\/b><\/td>\nAttempts<\/span><\/b><\/td>\n<\/tr>\n
106.187.47.170<\/span><\/td>\n34<\/span><\/td>\n<\/tr>\n
108.59.252.133<\/span><\/td>\n26<\/span><\/td>\n<\/tr>\n
118.139.162.178<\/span><\/td>\n20<\/span><\/td>\n<\/tr>\n
122.213.243.131<\/span><\/td>\n1<\/span><\/td>\n<\/tr>\n
123.30.208.178<\/span><\/td>\n3<\/span><\/td>\n<\/tr>\n
142.4.208.97<\/span><\/td>\n12<\/span><\/td>\n<\/tr>\n
162.211.82.114<\/span><\/td>\n1<\/span><\/td>\n<\/tr>\n
166.63.127.244<\/span><\/td>\n63<\/span><\/td>\n<\/tr>\n
174.142.104.207<\/span><\/td>\n1<\/span><\/td>\n<\/tr>\n
182.18.175.246<\/span><\/td>\n8<\/span><\/td>\n<\/tr>\n
184.168.109.23<\/span><\/td>\n16<\/span><\/td>\n<\/tr>\n
184.168.112.26<\/span><\/td>\n23<\/span><\/td>\n<\/tr>\n
185.9.157.31<\/span><\/td>\n26<\/span><\/td>\n<\/tr>\n
188.121.62.249<\/span><\/td>\n43<\/span><\/td>\n<\/tr>\n
188.165.202.118<\/span><\/td>\n12<\/span><\/td>\n<\/tr>\n
188.191.53.8<\/span><\/td>\n3<\/span><\/td>\n<\/tr>\n
188.64.170.221<\/span><\/td>\n232<\/span><\/td>\n<\/tr>\n
188.64.171.181<\/span><\/td>\n5<\/span><\/td>\n<\/tr>\n
190.107.177.102<\/span><\/td>\n13<\/span><\/td>\n<\/tr>\n
195.93.180.34<\/span><\/td>\n34<\/span><\/td>\n<\/tr>\n
198.50.112.114<\/span><\/td>\n52<\/span><\/td>\n<\/tr>\n
203.195.184.151<\/span><\/td>\n53<\/span><\/td>\n<\/tr>\n
205.186.142.240<\/span><\/td>\n43<\/span><\/td>\n<\/tr>\n
210.210.178.20<\/span><\/td>\n87<\/span><\/td>\n<\/tr>\n
212.112.232.106<\/span><\/td>\n1<\/span><\/td>\n<\/tr>\n
212.48.67.110<\/span><\/td>\n4<\/span><\/td>\n<\/tr>\n
216.222.148.52<\/span><\/td>\n1<\/span><\/td>\n<\/tr>\n
216.70.68.242<\/span><\/td>\n12<\/span><\/td>\n<\/tr>\n
216.98.196.14<\/span><\/td>\n1<\/span><\/td>\n<\/tr>\n
221.132.33.175<\/span><\/td>\n1<\/span><\/td>\n<\/tr>\n
222.255.29.39<\/span><\/td>\n18<\/span><\/td>\n<\/tr>\n
31.210.117.13<\/span><\/td>\n1<\/span><\/td>\n<\/tr>\n
37.122.210.63<\/span><\/td>\n6<\/span><\/td>\n<\/tr>\n
37.205.32.122<\/span><\/td>\n33<\/span><\/td>\n<\/tr>\n
37.59.29.48<\/span><\/td>\n81<\/span><\/td>\n<\/tr>\n
37.59.35.4<\/span><\/td>\n27<\/span><\/td>\n<\/tr>\n
41.190.76.5<\/span><\/td>\n14<\/span><\/td>\n<\/tr>\n
42.62.24.250<\/span><\/td>\n6<\/span><\/td>\n<\/tr>\n
46.102.232.243<\/span><\/td>\n9<\/span><\/td>\n<\/tr>\n
46.105.105.58<\/span><\/td>\n28<\/span><\/td>\n<\/tr>\n
46.165.206.78<\/span><\/td>\n112<\/span><\/td>\n<\/tr>\n
46.235.9.199<\/span><\/td>\n18<\/span><\/td>\n<\/tr>\n
46.4.20.133<\/span><\/td>\n3<\/span><\/td>\n<\/tr>\n
5.135.165.206<\/span><\/td>\n180<\/span><\/td>\n<\/tr>\n
5.135.188.80<\/span><\/td>\n6<\/span><\/td>\n<\/tr>\n
5.39.106.19<\/span><\/td>\n46<\/span><\/td>\n<\/tr>\n
5.9.121.109<\/span><\/td>\n61<\/span><\/td>\n<\/tr>\n
50.62.41.168<\/span><\/td>\n7<\/span><\/td>\n<\/tr>\n
50.63.130.155<\/span><\/td>\n19<\/span><\/td>\n<\/tr>\n
50.63.141.164<\/span><\/td>\n13<\/span><\/td>\n<\/tr>\n
50.97.138.111<\/span><\/td>\n2<\/span><\/td>\n<\/tr>\n
60.12.119.200<\/span><\/td>\n32<\/span><\/td>\n<\/tr>\n
62.212.130.150<\/span><\/td>\n24<\/span><\/td>\n<\/tr>\n
64.202.240.136<\/span><\/td>\n48<\/span><\/td>\n<\/tr>\n
64.207.147.191<\/span><\/td>\n13<\/span><\/td>\n<\/tr>\n
64.31.25.60<\/span><\/td>\n83<\/span><\/td>\n<\/tr>\n
64.34.173.227<\/span><\/td>\n244<\/span><\/td>\n<\/tr>\n
66.147.235.81<\/span><\/td>\n39<\/span><\/td>\n<\/tr>\n
67.215.7.226<\/span><\/td>\n19<\/span><\/td>\n<\/tr>\n
69.175.111.218<\/span><\/td>\n1<\/span><\/td>\n<\/tr>\n
69.64.65.10<\/span><\/td>\n3<\/span><\/td>\n<\/tr>\n
70.32.107.181<\/span><\/td>\n1<\/span><\/td>\n<\/tr>\n
80.97.64.148<\/span><\/td>\n4<\/span><\/td>\n<\/tr>\n
82.145.45.104<\/span><\/td>\n8<\/span><\/td>\n<\/tr>\n
83.96.132.85<\/span><\/td>\n46<\/span><\/td>\n<\/tr>\n
85.112.29.210<\/span><\/td>\n58<\/span><\/td>\n<\/tr>\n
85.204.118.142<\/span><\/td>\n1<\/span><\/td>\n<\/tr>\n
85.214.153.62<\/span><\/td>\n4<\/span><\/td>\n<\/tr>\n
85.214.64.100<\/span><\/td>\n27<\/span><\/td>\n<\/tr>\n
87.255.57.169<\/span><\/td>\n175<\/span><\/td>\n<\/tr>\n
88.190.45.37<\/span><\/td>\n1<\/span><\/td>\n<\/tr>\n
89.200.138.207<\/span><\/td>\n1<\/span><\/td>\n<\/tr>\n
89.47.253.2<\/span><\/td>\n58<\/span><\/td>\n<\/tr>\n
91.109.3.166<\/span><\/td>\n2<\/span><\/td>\n<\/tr>\n
95.0.26.85<\/span><\/td>\n20<\/span><\/td>\n<\/tr>\n
97.74.127.145<\/span><\/td>\n36<\/span><\/td>\n<\/tr>\n
Total Attempts:<\/span><\/b><\/td>\n2469<\/span><\/b><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Guess I should be flattered that I’m getting all of this “attention” \ud83d\ude42<\/p>\n","protected":false},"excerpt":{"rendered":"

Lately I’ve been getting tons and tons of login attempts from what appear to be botnets.\u00a0 Since I’m getting tired of banning the IPs individually, I’m temporary taking to banning entire countries and ISP’s from hitting my blog.\u00a0 If you’re … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-311","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/brian.digitalmaddox.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/311","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/brian.digitalmaddox.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/brian.digitalmaddox.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/brian.digitalmaddox.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/brian.digitalmaddox.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=311"}],"version-history":[{"count":3,"href":"https:\/\/brian.digitalmaddox.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/311\/revisions"}],"predecessor-version":[{"id":314,"href":"https:\/\/brian.digitalmaddox.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/311\/revisions\/314"}],"wp:attachment":[{"href":"https:\/\/brian.digitalmaddox.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=311"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/brian.digitalmaddox.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=311"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/brian.digitalmaddox.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=311"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}