List of bad IPs engaging in Denial Of Service attacks and Hacking attempts

[NewEraCracker]

Hacking

62.141.37.241
66.29.97.230
66.151.68.237
74.94.102.230
109.104.81.80
125.72.43.94
196.201.65.192
200.216.236.74
212.50.29.11
212.58.8.92
218.242.182.42

Denial Of Service Attacks

58.53.128.68
61.139.105.163
61.160.216.63
62.250.4.138
81.31.45.23
94.23.160.68
94.199.145.30
94.199.242.175
109.104.65.204
122.225.100.154
122.227.164.96
123.134.95.199
125.45.109.166
173.45.109.18
194.78.144.58
195.24.68.23
195.142.248.139
202.102.234.71
204.10.216.228
212.156.72.252
213.71.31.241

Please share your lists

 

[Smexy]

why is this here?
125.72.43.94

remove it from the list :D It's a shared vpn.

 

[drlove]

If you're a Rapidleech host don't copy this list blindly in your firewall. There might be some IPs which are IPs of filehosts.

 

[NewEraCracker]

why is this here?
125.72.43.94

remove it from the list :D It's a shared vpn.

This IP attacked my FTP and now is permanently null routed. Thats it.

 

[Sponge Bob]

123.19.39.126
123.125.66.92
123.125.66.81
123.125.66.80
123.125.66.78
123.125.66.73
123.125.66.69
123.125.66.64
123.125.66.60
123.125.66.57
123.125.66.134
123.125.66.133
123.125.66.132
123.125.66.117


124.115.0.169
124.115.0.161
124.115.0.109
124.115.0.100

123.125.66.94
123.125.66.83
123.125.66.133
123.125.66.126
123.125.66.123

124.115.0.169
124.115.0.158
124.115.0.109
124.115.0.100

123.125.66.78
123.125.66.77
123.125.66.74
123.125.66.67
123.125.66.66
123.125.66.63
123.125.66.58
123.125.66.57
123.125.66.131

207.246.193.6
207.246.193.32
207.246.193.25
207.246.193.23
124.115.4.199
124.115.4.196
124.115.4.191
124.115.0.170
123.125.66.84
123.125.66.76
123.125.66.73
123.125.66.70
123.125.66.69
123.125.66.65
123.125.66.124
123.125.66.118

220.255.7.234
220.255.7.235
220.255.7.237

Ban the whole range of 220.255.7.xxx

Here is a few of my list Block them asap

 

[NewEraCracker]

Those 123.125.x.x are baidu spider. Seem to be harmless.

Also look what I found:
MEDIADEFENDER: 207.246.193.0 - 207.246.193.127

Thanks for sharing.

 

[Sponge Bob]

Whats with this media defender?

Thanks & Regards

 

[Sponge Bob]

hmm those i dont think they seem useless coz how can they just add the whole IP range to look at your server or website?

look at this:
124.115.4.193
1 124.115.0.28
1 124.115.0.25
1 124.115.0.19
1 124.115.0.16
1 123.125.66.93
1 123.125.66.85
1 123.125.66.75
1 123.125.66.74
1 123.125.66.70
1 123.125.66.64
1 123.125.66.60
1 123.125.66.59
1 123.125.66.58
1 123.125.66.121
1 123.125.66.117

 

[champ_007_bond]

Where is Krun!x ???
Come'on update with some IP's here!

 

[NewEraCracker]

Here are few more. Those don't engage in DDoS or Hacking but are still evil to warez:

#USA Anti-P2P
76.74.24.0/24
149.101.0.0/16
153.31.128.0/18
207.246.193.0/25

#French Anti-P2P
82.138.74.0/25
82.138.81.0/24
82.138.70.128/26
85.159.236.0/24
85.159.232.80/28
91.189.104.0/21
193.105.197.0/24
193.107.240.0/22
195.191.244.0/23

#UK Anti-P2P
212.100.0.0/19

#PT Anti-P2P
91.198.182.0/24

#Invision Power
70.33.186.224/30
70.33.186.228/30
208.67.212.0/22

#Internet Brands
64.202.189.170
68.178.254.168
81.134.2.134
98.158.192.0/20
209.62.16.128/27

 

[Gh0st]

Nice list NEC :P

 

[michnagy]

Thanks for sharing...

 

[champ of champs]

Thanks for share

 

[cyber.crime]

SSH Attack

109.123.78.85
121.88.249.122
122.166.121.66

 

[cyber.crime]

DDOS Attack this list at my IP Table ban Permanent

129.44.54.208
182.50.0.237
184.154.6.137
186.10.145.172
186.19.218.247
190.98.156.177
193.151.59.201
195.64.203.55
208.115.202.104
218.24.169.240
220.95.232.107
222.82.250.164
60.191.66.66
61.178.32.225
61.7.235.206
64.244.22.250
69.126.170.83
69.38.225.251
88.35.148.182
89.18.5.9
93.186.192.248

 

[NewEraCracker]

My current deny list in .htaccess

#DoS Attacks
deny from 38.107.163.165
deny from 41.190.16.17
deny from 69.64.64.0/19
deny from 69.80.99.214
deny from 89.149.192.0/18
deny from 94.100.25.52
deny from 109.123.64.0/18
deny from 109.230.208.0/20
deny from 109.230.246.0/24
deny from 173.224.208.0/20
deny from 188.92.72.0/21
deny from 195.162.68.146
deny from 204.124.180.0/22
deny from 208.86.198.0/24
deny from 212.113.32.0/21

#USA Anti-P2P
deny from 76.74.24.0/24
deny from 149.101.0.0/16
deny from 153.31.128.0/18
deny from 207.246.193.0/25

#French Anti-P2P
deny from 82.138.74.0/25
deny from 82.138.81.0/24
deny from 82.138.70.128/26
deny from 85.159.236.0/24
deny from 85.159.232.80/28
deny from 91.189.104.0/21
deny from 193.105.197.0/24
deny from 193.107.240.0/22
deny from 195.191.244.0/23

#UK Anti-P2P
deny from 212.100.0.0/19

#PT Anti-P2P
deny from 91.198.182.0/24

#Invision Power
deny from 70.33.186.224/30
deny from 70.33.186.228/30
deny from 208.42.236.0/25
deny from 208.67.212.0/22

#Internet Brands
deny from 64.202.189.170
deny from 68.178.254.168
deny from 81.134.2.134
deny from 98.158.192.0/20
deny from 209.62.16.128/27

 

[rapidleech]

as cyber.crime alluded to, better to enter ip bans into csf or at iptables/firewall level, espeically for dos (as opposed to htaccess).

thanks for all the lists

 

[kizmark]

what's the difference with blocking using .htaccess or by the Forum Engine Command?..
Updating my List. thanks

 

[SuicidalMedia]

@kizmark
If you block it via .htaccess, it will be blocked for that site only, e.g. root/domains/somedomain.com/.htaccess

But the user will be able to access root/domains/someotherdomain.com as his ip isn't blocked from accessing the server, just from accessing the specific site.

If you block it via iptables, guy with the blocked ip won't be able to access any site hosted on that server..

 

[Maze]

What Jason said