Just give up, you morons

On 2016-12-19, this blog came under attack by some kind of botnet. They were trying to log in to the admin interface, but Cerber (an excellent plugin, by the way) locked out their subnets. It is not worth blocking the IPs at the router level, because they come from all over. So I will just let Cerber do its work.

I got tired of getting emails warning me that another IP had been blocked, so I disabled logins. Now the bots will just get a 404. In case you are interested, below is a partial list of what was blocked. There were about 200 separate attempts, spaced out so as not to trigger rate controls, before I welded the door shut.

[table]
IP,Hostname,Date
109.205.137.65,ns1.servidorneptuno.com,”2016-12-19, 11:25 pm”
85.17.242.68,www14.totaalholding.nl,”2016-12-19, 11:20 pm”
84.253.184.42,net84-253-184-042.mclink.it,”2016-12-19, 11:13 pm”
91.189.123.170,cpanel1.siteman.no,”2016-12-19, 11:01 pm”
192.241.243.118,192.241.243.118,”2016-12-19, 10:56 pm”
176.53.24.206,cpanel2.sayfa.net,”2016-12-19, 10:39 pm”
162.252.85.175,theemnetwork.theemnetwork.com,”2016-12-19, 10:37 pm”
103.15.156.7,goanna.abstractdns.com,”2016-12-19, 10:28 pm”
222.165.193.218,ulundanu.velo.net.id,”2016-12-19, 10:27 pm”
67.23.238.106,ourea.valueserver.com.br,”2016-12-19, 10:13 pm”
210.81.170.125,svr.world-supply.co.jp,”2016-12-19, 9:47 pm”
185.84.108.11,web27.majordomo.ru,”2016-12-19, 9:41 pm”
66.7.214.152,pass81.dizinc.com,”2016-12-19, 9:33 pm”
192.169.245.20,ip-192-169-245-20.ip.secureserver.net,”2016-12-19, 9:32 pm”
139.153.14.206,webhost.stir.ac.uk,”2016-12-19, 9:30 pm”
189.113.175.75,extensao.extensao.net,”2016-12-19, 9:18 pm”
35.166.10.154,ec2-35-166-10-154.us-west-2.compute.amazonaws.com,”2016-12-19, 9:02 pm”
103.27.210.46,103.27.210.46,”2016-12-19, 8:51 pm”
209.151.89.7,server.qpop.net,”2016-12-19, 8:48 pm”
203.132.14.2,earth.hostmaster.com.au,”2016-12-19, 8:45 pm”
50.28.38.69,diesel.on-rev.com,”2016-12-19, 8:39 pm”
185.69.233.116,sh2.hosty.nl,”2016-12-19, 8:29 pm”
213.108.106.220,213.108.106.220,”2016-12-19, 8:22 pm”
216.224.167.58,aaronswartz.hostilis.com,”2016-12-19, 8:18 pm”
81.21.70.227,vl22737.dns-privadas.es,”2016-12-19, 8:06 pm”
77.89.7.35,PTR-77.89.7.35,”2016-12-19, 8:03 pm”
104.130.158.42,3rdquark.com,”2016-12-19, 7:39 pm”
96.30.56.234,ajah.syskay.com,”2016-12-19, 7:31 pm”
61.218.139.196,61-218-139-196.HINET-IP.hinet.net,”2016-12-19, 7:30 pm”
195.22.8.68,kore.dnskore.com,”2016-12-19, 7:29 pm”
74.50.0.200,sirona.lunarservers.com,”2016-12-19, 7:11 pm”
185.18.232.10,da1.wideserver.it,”2016-12-19, 7:10 pm”
188.132.129.15,linux15.sadecehosting.com,”2016-12-19, 7:08 pm”
74.50.25.180,dasim.lunarbreeze.com,”2016-12-19, 7:08 pm”
84.115.165.35,84-115-165-35.cable.dynamic.surfer.at,”2016-12-19, 7:07 pm”
207.198.106.183,207.198.106.183,”2016-12-19, 6:55 pm”
43.247.164.66,43.247.164.66,”2016-12-19, 6:49 pm”
110.143.151.83,och1723061.lnk.telstra.net,”2016-12-19, 6:48 pm”
137.74.42.201,eska.saltybarons.pl,”2016-12-19, 6:45 pm”
103.244.250.19,103.244.250.19,”2016-12-19, 6:44 pm”
207.7.84.103,host.exam-test.com,”2016-12-19, 6:40 pm”
192.254.149.97,mvp.mvpacific.com,”2016-12-19, 6:21 pm”
185.69.233.108,cloud.mchlserver.nl,”2016-12-19, 6:09 pm”
93.170.96.12,nimbus.cable.st,”2016-12-19, 6:06 pm”
69.73.181.140,daffodil.nocdirect.com,”2016-12-19, 5:58 pm”
70.33.241.230,cpanel.firmshosting.com,”2016-12-19, 5:56 pm”
77.235.55.206,srv.clicktocallbutton.net,”2016-12-19, 5:32 pm”
64.182.22.220,220-22-182-64.cust.dal01.corespace.com,”2016-12-19, 5:14 pm”
69.43.195.164,cs.cnymm.com,”2016-12-19, 5:14 pm”
93.189.24.35,wh1.web.ipax.at,”2016-12-19, 5:06 pm”
208.73.32.109,virt6b.secure-wi.com,”2016-12-19, 5:05 pm”
66.45.228.80,kottonmouth.trouble-free.net,”2016-12-19, 5:04 pm”
54.243.135.105,ec2-54-243-135-105.compute-1.amazonaws.com,”2016-12-19, 4:59 pm”
91.121.75.53,ks25746.kimsufi.com,”2016-12-19, 4:51 pm”
62.214.6.47,hv.regioconnect.net,”2016-12-19, 4:05 pm”
195.8.222.33,s801.sureserver.com,”2016-12-19, 4:01 pm”
213.246.61.36,srv009.msainternational.com,”2016-12-19, 3:53 pm”
193.240.1.94,193.240.1.94,”2016-12-19, 3:53 pm”
203.169.229.16,ns16.hostingspeed.net,”2016-12-19, 3:42 pm”
91.103.232.16,h91-232-16.cornut.fr,”2016-12-19, 3:23 pm”
69.28.199.240,hp157.hostpapa.com,”2016-12-19, 3:21 pm”
184.171.250.74,sv1.roteirodeferias.com.br,”2016-12-19, 3:16 pm”
208.94.237.102,zilg1.onyxlight.net,”2016-12-19, 3:09 pm”
188.65.112.191,totalwebsltd.servers.prgn.misp.co.uk,”2016-12-19, 3:07 pm”
207.7.84.127,host.cornerstonedistributors.com,”2016-12-19, 2:54 pm”
24.1.142.57,c-24-1-142-57.hsd1.il.comcast.net,”2016-12-19, 2:52 pm”
213.136.72.218,server002.infodem.net,”2016-12-19, 2:18 pm”
69.160.84.107,host-107.srv-69-160-84.legion-1.nethosting.com,”2016-12-19, 2:14 pm”
5.135.75.98,websrv01.ara-tech.org,”2016-12-19, 2:12 pm”
216.117.128.23,216.117.128.23,”2016-12-19, 2:01 pm”
89.157.243.247,89-157-243-247.rev.numericable.fr,”2016-12-19, 1:58 pm”
76.77.144.30,76-77-144-30.cyrusone.com,”2016-12-19, 1:42 pm”
150.107.73.3,lvps2.vivait.com.au,”2016-12-19, 1:39 pm”
52.3.124.86,ec2-52-3-124-86.compute-1.amazonaws.com,”2016-12-19, 1:08 pm”
178.16.57.212,178.16.57.212,”2016-12-19, 1:03 pm”
217.147.227.211,web.bastibubu.ge,”2016-12-19, 12:53 pm”
38.109.218.22,38.109.218.22,”2016-12-19, 12:44 pm”
116.254.101.177,mail.psikoteskarier.com,”2016-12-19, 12:38 pm”
195.230.5.38,vkv5.com,”2016-12-19, 12:21 pm”
186.202.127.122,cpanel0071.hospedagemdesites.ws,”2016-12-19, 12:07 pm”
217.70.190.54,xvm-190-54.dc0.ghst.net,”2016-12-19, 12:02 pm”
5.2.130.206,static-5-2-130-206.rdsnet.ro,”2016-12-19, 11:53 am”
41.74.186.244,webnode7.hosting.rsaweb.co.za,”2016-12-19, 11:53 am”
94.138.210.202,mail245.duyuruonline.com,”2016-12-19, 11:36 am”
192.240.190.64,obpmia1-01.nexcess.net,”2016-12-19, 11:33 am”
148.251.242.101,static.101.242.251.148.clients.your-server.de,”2016-12-19, 11:01 am”
180.179.206.187,180.179.206.187,”2016-12-19, 10:42 am”
54.204.37.176,ec2-54-204-37-176.compute-1.amazonaws.com,”2016-12-19, 10:34 am”
66.55.138.59,ds5.extentions.net,”2016-12-19, 10:10 am”
220.135.181.7,220-135-181-7.HINET-IP.hinet.net,”2016-12-19, 9:55 am”
167.250.5.2,nb2.servidoraweb.net,”2016-12-19, 9:40 am”
93.191.130.213,eadtu.futuron.net,”2016-12-19, 9:29 am”
1.234.22.222,1.234.22.222,”2016-12-19, 9:21 am”
205.233.212.3,molecule.adnhosting.ca,”2016-12-19, 9:15 am”
192.254.140.247,spa.sparepages.com,”2016-12-19, 9:06 am”
198.55.115.130,srv12.thehostservers.com,”2016-12-19, 9:02 am”
198.55.115.130,srv12.thehostservers.com,”2016-12-19, 9:02 am”
91.184.62.101,t101.nlserver.net,”2016-12-19, 8:26 am”
216.107.145.3,server56.01domain.net,”2016-12-19, 8:18 am”
119.9.93.123,119.9.93.123,”2016-12-19, 8:16 am”
190.202.44.206,190-202-44-206.genericrev.cantv.net,”2016-12-19, 7:46 am”
198.46.82.33,ehub33.webhostinghub.com,”2016-12-19, 7:38 am”
74.207.230.138,urduweb.org,”2016-12-19, 7:38 am”
104.251.214.181,host.greenseedsdesign.com,”2016-12-19, 7:35 am”
213.136.79.203,vmi25937.contabo.host,”2016-12-19, 7:02 am”
69.73.181.140,daffodil.nocdirect.com,”2016-12-19, 6:46 am”
37.59.7.66,ns3003260.ovh.net,”2016-12-19, 6:45 am”
62.116.165.227,srv.cbm-vertrieb.de,”2016-12-19, 6:39 am”
200.52.255.30,200-52-255-30.colmex.mx,”2016-12-19, 6:02 am”
89.234.67.10,bla-shs-p01.avova.ie,”2016-12-19, 5:47 am”
195.162.24.216,go3.kylos.net.pl,”2016-12-19, 5:29 am”
185.66.175.156,185.66.175.156,”2016-12-19, 5:26 am”
68.233.238.184,titan.sys-corp.com.au,”2016-12-19, 5:05 am”
69.94.35.102,megmckinneyphotos.com,”2016-12-19, 4:59 am”
74.200.89.87,hosted.dcsny.com,”2016-12-19, 4:48 am”
134.0.15.94,fnhcc-19.srv.cat,”2016-12-19, 4:46 am”
216.97.237.25,corvus.lunarpages.com,”2016-12-19, 2:46 am”
[/table]

 

Leave a Reply

Your email address will not be published. Required fields are marked *