dmolavi writes:With the recent release of several known exploits in the phpBB2 forums software (the highlighting code exploit), as well as issues in PHP itself, I have seen a huge surge in the number of attempts at my site to gain unauthorized access; reaching nearly 5000 unique IP addresses being blocked on 8 January 2005. I'm sure that many other website administrators will notice the same trend. As such, I'm reminding everyone about the IP Address Blacklist available at NukedGallery.net (Downloads -> PHPNuke -> Misc Code). This is a file which is updated nightly with all the new addresses which have attempted to break into my servers, either via port 80, or other ports (see http://www.nukedgallery.net/modules.php?name=IPBan for a complete listing).
Registration is required, to prevent bandwidth leaching bots from pulling the files.
Re: IP Address Blacklist Revisited (Score: 1) | ![]() | Will a file of this size slow down my site? |
Re: IP Address Blacklist Revisited (Score: 1) by dmolavi on Monday, January 10, 2005 @ 11:24:43 CST (User Info | Send a Message) http://www.nukedgallery.net | |
depends on your implementation. i use iptables, and keep entries in it for a week, after which, stale entries are removed. |
Re: IP Address Blacklist Revisited (Score: 1) by sharlein on Monday, January 10, 2005 @ 12:08:04 CST (User Info | Send a Message) | |
Thank you. |
Re: IP Address Blacklist Revisited (Score: 1) | ![]() | well i dont think it works that way. this doesnt mean there should be a reason for people to import your blocked ip's. if its a case of real attacks then open proxies are used and therefore adding all those ip's are useless. sometimes someone gives me an ip and recommends to blocklist the person and even then i wanna know why and if its reason enough for me to accept it. another way to explain your huge list is that you are a popular site to attack... but to be honest,even i ad an ip sometimes but we should play it fair and actualy block someone whe he or she deserves it... |