Thanks for the heads up on this... This has given me a few ideas on some custom blocking software... If it works out, ill be sure to release it...
On 5/13/07, Faisal N Jawdat <[EMAIL PROTECTED]> wrote:
Given the level of the traffic, you might look at implementing something like Deny Spammers at he /24 level (rather than the host level). https://sourceforge.net/projects/deny-spammers/ -faisal On May 13, 2007, at 12:15 AM, Jason Frisvold wrote: > On 5/12/07, Jason Frisvold <[EMAIL PROTECTED]> wrote: >> I installed the botnet plugin today, but it's not going to help >> anyway.. The IPs these are coming from resolve to a variety of >> different hostnames, all without triggering botnet at all. > > Here's a sample of the hits I'm getting ... As you can see, its a > bunch of different IPs in various ranges.. I've decided to just block > the ranges at this point.. I have no idea if there's anything legit > in there, but I'll take that risk... > > baseball142.pamwheeled.com (66.96.245.142) > baseball15.hammersmoky.com (66.96.245.15) > baseball167.pamwheeled.com (66.96.245.167) > baseball168.pamwheeled.com (66.96.245.168) > baseball184.itlivestock.com (66.96.245.184) > baseball20.hammersmoky.com (66.96.245.20) > baseball210.itlivestock.com (66.96.245.210) > baseball237.burmesetow.com (66.96.245.237) > baseball247.burmesetow.com (66.96.245.247) > baseball31.hammersmoky.com (66.96.245.31) > baseball6.hammersmoky.com (66.96.245.6) > baseball75.platenormal.com (66.96.245.75) > crowflies110.yentropical.com (65.111.26.110) > crowflies131.yentropical.com (65.111.26.131) > crowflies15.mowcraving.com (65.111.26.15) > crowflies168.ropepin.com (65.111.26.168) > crowflies176.ropepin.com (65.111.26.176) > crowflies186.ropepin.com (65.111.26.186) > crowflies19.mowcraving.com (65.111.26.19) > crowflies33.mowcraving.com (65.111.26.33) > crowflies42.mowcraving.com (65.111.26.42) > crowflies57.beforefor.com (65.111.26.57) > crowflies63.beforefor.com (65.111.26.63) > lampshade144.acidicbee.com (66.240.249.144) > lampshade153.acidicbee.com (66.240.249.153) > lampshade161.acidicbee.com (66.240.249.161) > lampshade183.acidicbee.com (66.240.249.183) > lampshade183.acidicbee.com (66.240.249.183) > lampshade213.acidicbee.com (66.240.249.213) > lampshade231.acidicbee.com (66.240.249.231) > lampshade231.acidicbee.com (66.240.249.231) > lampshade239.acidicbee.com (66.240.249.239) > later112.itbobble.com (216.74.88.112) > later13.divesthow.com (216.74.88.13) > later15.divesthow.com (216.74.88.15) > later189.tarponway.com (216.74.88.189) > later20.divesthow.com (216.74.88.20) > later216.usefulget.com (216.74.88.216) > later217.usefulget.com (216.74.88.217) > later225.usefulget.com (216.74.88.225) > later250.usefulget.com (216.74.88.250) > later69.itbobble.com (216.74.88.69) > mail136.yenram.com (64.191.11.136) > mail237.todinto.com (64.191.11.237) > mail239.todinto.com (64.191.11.239) > mail250.todinto.com (64.191.11.250) > mail91.rangeat.com (64.191.11.91) > movie113.fencingnow.com (216.10.25.113) > movie119.fencingnow.com (216.10.25.119) > movie120.fencingnow.com (216.10.25.120) > movie126.fencingnow.com (216.10.25.126) > movie166.measleit.com (216.10.25.166) > movie184.measleit.com (216.10.25.184) > movie207.fosteris.com (216.10.25.207) > movie78.fencingnow.com (216.10.25.78) > mustang214.pugto.com (72.37.196.214) > mustang242.pugto.com (72.37.196.242) > omega172.dressyoung.com (66.197.254.172) > omega199.dressyoung.com (66.197.254.199) > omega225.dressyoung.com (66.197.254.225) > omega237.dressyoung.com (66.197.254.237) > omega86.byknife.com (66.197.254.86) > pick17.heatscanna.com (64.192.26.17) > pick182.runninghit.com (64.192.26.182) > rainy206.grimacehot.com (66.96.252.206) > rush100.standbot.com (66.96.255.100) > rush101.standbot.com (66.96.255.101) > rush103.standbot.com (66.96.255.103) > rush131.ifweight.com (66.96.255.131) > rush188.whobeak.com (66.96.255.188) > rush206.whobeak.com (66.96.255.206) > rush208.whenpile.com (66.96.255.208) > rush226.whenpile.com (66.96.255.226) > rush232.whenpile.com (66.96.255.232) > rush236.whenpile.com (66.96.255.236) > rush251.whenpile.com (66.96.255.251) > source238.wearisen.com (216.74.120.238) > source244.wearisen.com (216.74.120.244) > teaching200.wordssort.com (64.192.28.200) > teaching33.camelcoat.com (64.192.28.33) > > -- > Jason 'XenoPhage' Frisvold > [EMAIL PROTECTED] > http://blog.godshell.com
-- Jason 'XenoPhage' Frisvold [EMAIL PROTECTED] http://blog.godshell.com
