Page 1 of 1

Best Source for Blocking lists (Chinese spammers/hackers)?

Posted: Tue Oct 03, 2006 4:08 pm
by kschaefer
Any good recommendations on where to find good lists?

Posted: Tue Oct 03, 2006 4:30 pm
by janisk
write your own

or just manage your ROS security so that only from trusted locations you can login
thats what i do :roll:

Not good enough.

Posted: Thu Oct 05, 2006 5:40 am
by kschaefer
It doesn't make sense. Everybody doing their own thing. 180 domains and 1000+ email accounts is too much to leave open.

Posted: Thu Oct 05, 2006 8:58 am
by normis
why do you need 180 domains to access your router? all you need to do is leave admin access to your router. or are you talking about someone hacking your customer's PC? then this is a completely different thing.

Posted: Thu Oct 05, 2006 3:48 pm
by danielillu
I think kschaefer refers to lists of typical "malware addresses" (usually from china) to ban them directly at external routers, preventing then any intent to establish a comunication to that addresses.

But I don't know any place to start searching. yo could try looking for p2p banned ip listings. and from then digg the net a while.

Posted: Thu Oct 05, 2006 4:17 pm
by jo2jo
I see where his question is coming from...i do the same and that is to drop all traffic from the korea and china IP blocks...i know this does not block all of china but it blocks some and essentially nothing good comes out of china internetwise so my customers dont need it.

see:

http://www.okean.com/sinokorea.txt

or search google for china ip block or range

Thanks.

Posted: Sat Oct 07, 2006 5:39 am
by kschaefer
Thank you Daniel and jo2jo. Yes. I have MT as a core router to the net with dual T1 and just want to block large chunks of China (and other spammers sniffers exploiters) from accessing our web hosting servers.

Posted: Sat Oct 07, 2006 8:22 am
by Stryker777
That is the list I have used in the past. It did reduce the traffic drastically.

Posted: Sun Oct 08, 2006 5:00 pm
by danielillu
how do you add all these huge amount of lines?
one at a time? :S or there is any faster method I don't know?

Posted: Mon Oct 09, 2006 4:39 am
by Stryker777
I just put them into a spread sheet, then added my rule before the ip, and the part after the ip. Copied them to every cell in the columns and then copied and pasted into gedit. After that, I copied and pasted into router.