Just give up, you morons

On 2016-12-19, this blog came under attack by some kind of botnet. They were trying to log in to the admin interface, but Cerber (an excellent plugin, by the way) locked out their subnets. It is not worth blocking the IPs at the router level, because they come from all over. So I will just let Cerber do its work.

I got tired of getting emails warning me that another IP had been blocked, so I disabled logins. Now the bots will just get a 404. In case you are interested, below is a partial list of what was blocked. There were about 200 separate attempts, spaced out so as not to trigger rate controls, before I welded the door shut.

IP Hostname Date
109.205.137.65 ns1.servidorneptuno.com 2016-12-19, 11:25 pm
85.17.242.68 www14.totaalholding.nl 2016-12-19, 11:20 pm
84.253.184.42 net84-253-184-042.mclink.it 2016-12-19, 11:13 pm
91.189.123.170 cpanel1.siteman.no 2016-12-19, 11:01 pm
192.241.243.118 192.241.243.118 2016-12-19, 10:56 pm
176.53.24.206 cpanel2.sayfa.net 2016-12-19, 10:39 pm
162.252.85.175 theemnetwork.theemnetwork.com 2016-12-19, 10:37 pm
103.15.156.7 goanna.abstractdns.com 2016-12-19, 10:28 pm
222.165.193.218 ulundanu.velo.net.id 2016-12-19, 10:27 pm
67.23.238.106 ourea.valueserver.com.br 2016-12-19, 10:13 pm
210.81.170.125 svr.world-supply.co.jp 2016-12-19, 9:47 pm
185.84.108.11 web27.majordomo.ru 2016-12-19, 9:41 pm
66.7.214.152 pass81.dizinc.com 2016-12-19, 9:33 pm
192.169.245.20 ip-192-169-245-20.ip.secureserver.net 2016-12-19, 9:32 pm
139.153.14.206 webhost.stir.ac.uk 2016-12-19, 9:30 pm
189.113.175.75 extensao.extensao.net 2016-12-19, 9:18 pm
35.166.10.154 ec2-35-166-10-154.us-west-2.compute.amazonaws.com 2016-12-19, 9:02 pm
103.27.210.46 103.27.210.46 2016-12-19, 8:51 pm
209.151.89.7 server.qpop.net 2016-12-19, 8:48 pm
203.132.14.2 earth.hostmaster.com.au 2016-12-19, 8:45 pm
50.28.38.69 diesel.on-rev.com 2016-12-19, 8:39 pm
185.69.233.116 sh2.hosty.nl 2016-12-19, 8:29 pm
213.108.106.220 213.108.106.220 2016-12-19, 8:22 pm
216.224.167.58 aaronswartz.hostilis.com 2016-12-19, 8:18 pm
81.21.70.227 vl22737.dns-privadas.es 2016-12-19, 8:06 pm
77.89.7.35 PTR-77.89.7.35 2016-12-19, 8:03 pm
104.130.158.42 3rdquark.com 2016-12-19, 7:39 pm
96.30.56.234 ajah.syskay.com 2016-12-19, 7:31 pm
61.218.139.196 61-218-139-196.HINET-IP.hinet.net 2016-12-19, 7:30 pm
195.22.8.68 kore.dnskore.com 2016-12-19, 7:29 pm
74.50.0.200 sirona.lunarservers.com 2016-12-19, 7:11 pm
185.18.232.10 da1.wideserver.it 2016-12-19, 7:10 pm
188.132.129.15 linux15.sadecehosting.com 2016-12-19, 7:08 pm
74.50.25.180 dasim.lunarbreeze.com 2016-12-19, 7:08 pm
84.115.165.35 84-115-165-35.cable.dynamic.surfer.at 2016-12-19, 7:07 pm
207.198.106.183 207.198.106.183 2016-12-19, 6:55 pm
43.247.164.66 43.247.164.66 2016-12-19, 6:49 pm
110.143.151.83 och1723061.lnk.telstra.net 2016-12-19, 6:48 pm
137.74.42.201 eska.saltybarons.pl 2016-12-19, 6:45 pm
103.244.250.19 103.244.250.19 2016-12-19, 6:44 pm
207.7.84.103 host.exam-test.com 2016-12-19, 6:40 pm
192.254.149.97 mvp.mvpacific.com 2016-12-19, 6:21 pm
185.69.233.108 cloud.mchlserver.nl 2016-12-19, 6:09 pm
93.170.96.12 nimbus.cable.st 2016-12-19, 6:06 pm
69.73.181.140 daffodil.nocdirect.com 2016-12-19, 5:58 pm
70.33.241.230 cpanel.firmshosting.com 2016-12-19, 5:56 pm
77.235.55.206 srv.clicktocallbutton.net 2016-12-19, 5:32 pm
64.182.22.220 220-22-182-64.cust.dal01.corespace.com 2016-12-19, 5:14 pm
69.43.195.164 cs.cnymm.com 2016-12-19, 5:14 pm
93.189.24.35 wh1.web.ipax.at 2016-12-19, 5:06 pm
208.73.32.109 virt6b.secure-wi.com 2016-12-19, 5:05 pm
66.45.228.80 kottonmouth.trouble-free.net 2016-12-19, 5:04 pm
54.243.135.105 ec2-54-243-135-105.compute-1.amazonaws.com 2016-12-19, 4:59 pm
91.121.75.53 ks25746.kimsufi.com 2016-12-19, 4:51 pm
62.214.6.47 hv.regioconnect.net 2016-12-19, 4:05 pm
195.8.222.33 s801.sureserver.com 2016-12-19, 4:01 pm
213.246.61.36 srv009.msainternational.com 2016-12-19, 3:53 pm
193.240.1.94 193.240.1.94 2016-12-19, 3:53 pm
203.169.229.16 ns16.hostingspeed.net 2016-12-19, 3:42 pm
91.103.232.16 h91-232-16.cornut.fr 2016-12-19, 3:23 pm
69.28.199.240 hp157.hostpapa.com 2016-12-19, 3:21 pm
184.171.250.74 sv1.roteirodeferias.com.br 2016-12-19, 3:16 pm
208.94.237.102 zilg1.onyxlight.net 2016-12-19, 3:09 pm
188.65.112.191 totalwebsltd.servers.prgn.misp.co.uk 2016-12-19, 3:07 pm
207.7.84.127 host.cornerstonedistributors.com 2016-12-19, 2:54 pm
24.1.142.57 c-24-1-142-57.hsd1.il.comcast.net 2016-12-19, 2:52 pm
213.136.72.218 server002.infodem.net 2016-12-19, 2:18 pm
69.160.84.107 host-107.srv-69-160-84.legion-1.nethosting.com 2016-12-19, 2:14 pm
5.135.75.98 websrv01.ara-tech.org 2016-12-19, 2:12 pm
216.117.128.23 216.117.128.23 2016-12-19, 2:01 pm
89.157.243.247 89-157-243-247.rev.numericable.fr 2016-12-19, 1:58 pm
76.77.144.30 76-77-144-30.cyrusone.com 2016-12-19, 1:42 pm
150.107.73.3 lvps2.vivait.com.au 2016-12-19, 1:39 pm
52.3.124.86 ec2-52-3-124-86.compute-1.amazonaws.com 2016-12-19, 1:08 pm
178.16.57.212 178.16.57.212 2016-12-19, 1:03 pm
217.147.227.211 web.bastibubu.ge 2016-12-19, 12:53 pm
38.109.218.22 38.109.218.22 2016-12-19, 12:44 pm
116.254.101.177 mail.psikoteskarier.com 2016-12-19, 12:38 pm
195.230.5.38 vkv5.com 2016-12-19, 12:21 pm
186.202.127.122 cpanel0071.hospedagemdesites.ws 2016-12-19, 12:07 pm
217.70.190.54 xvm-190-54.dc0.ghst.net 2016-12-19, 12:02 pm
5.2.130.206 static-5-2-130-206.rdsnet.ro 2016-12-19, 11:53 am
41.74.186.244 webnode7.hosting.rsaweb.co.za 2016-12-19, 11:53 am
94.138.210.202 mail245.duyuruonline.com 2016-12-19, 11:36 am
192.240.190.64 obpmia1-01.nexcess.net 2016-12-19, 11:33 am
148.251.242.101 static.101.242.251.148.clients.your-server.de 2016-12-19, 11:01 am
180.179.206.187 180.179.206.187 2016-12-19, 10:42 am
54.204.37.176 ec2-54-204-37-176.compute-1.amazonaws.com 2016-12-19, 10:34 am
66.55.138.59 ds5.extentions.net 2016-12-19, 10:10 am
220.135.181.7 220-135-181-7.HINET-IP.hinet.net 2016-12-19, 9:55 am
167.250.5.2 nb2.servidoraweb.net 2016-12-19, 9:40 am
93.191.130.213 eadtu.futuron.net 2016-12-19, 9:29 am
1.234.22.222 1.234.22.222 2016-12-19, 9:21 am
205.233.212.3 molecule.adnhosting.ca 2016-12-19, 9:15 am
192.254.140.247 spa.sparepages.com 2016-12-19, 9:06 am
198.55.115.130 srv12.thehostservers.com 2016-12-19, 9:02 am
198.55.115.130 srv12.thehostservers.com 2016-12-19, 9:02 am
91.184.62.101 t101.nlserver.net 2016-12-19, 8:26 am
216.107.145.3 server56.01domain.net 2016-12-19, 8:18 am
119.9.93.123 119.9.93.123 2016-12-19, 8:16 am
190.202.44.206 190-202-44-206.genericrev.cantv.net 2016-12-19, 7:46 am
198.46.82.33 ehub33.webhostinghub.com 2016-12-19, 7:38 am
74.207.230.138 urduweb.org 2016-12-19, 7:38 am
104.251.214.181 host.greenseedsdesign.com 2016-12-19, 7:35 am
213.136.79.203 vmi25937.contabo.host 2016-12-19, 7:02 am
69.73.181.140 daffodil.nocdirect.com 2016-12-19, 6:46 am
37.59.7.66 ns3003260.ovh.net 2016-12-19, 6:45 am
62.116.165.227 srv.cbm-vertrieb.de 2016-12-19, 6:39 am
200.52.255.30 200-52-255-30.colmex.mx 2016-12-19, 6:02 am
89.234.67.10 bla-shs-p01.avova.ie 2016-12-19, 5:47 am
195.162.24.216 go3.kylos.net.pl 2016-12-19, 5:29 am
185.66.175.156 185.66.175.156 2016-12-19, 5:26 am
68.233.238.184 titan.sys-corp.com.au 2016-12-19, 5:05 am
69.94.35.102 megmckinneyphotos.com 2016-12-19, 4:59 am
74.200.89.87 hosted.dcsny.com 2016-12-19, 4:48 am
134.0.15.94 fnhcc-19.srv.cat 2016-12-19, 4:46 am
216.97.237.25 corvus.lunarpages.com 2016-12-19, 2:46 am

 

Be the first to comment

Leave a Reply

Your email address will not be published.


*