IPs You should block rightaway if you are using wordpress.

[mani.dxb007]

68.183.164.2
216.224.225.7
46.101.103.184
185.86.13.213

Block these ones NOW! DDoS and they are using bots to link your websites back to rotten domains. I have Wordfence PRO and for one of my websites WF had me bitting my nails because these ones are handle by pros. It's important to say to all WP owners: please rename your wp-admin... Be extra careful to your search boxes as well... SQL Injections are quite easy even for newbies.

Right, that is exactly why i keep updating this thread so we can maintain a sort of blacklist which we block on every website, new or old.

 

[Member_MMO]

With 2-Step Verification (two- factor authentication).
It is safe? Bro

 

[Renfield-Files]

With 2-Step Verification (two- factor authentication).
It is safe? Bro

A little math about sql tables and they screw you. I blacklist every suspect IP and just log onto my WP from my VPN. But yes... Wordfence and Login AT limited help a lot. Save a cell number just for 2-step verification.

 

[ATuringtest]

My ringfence report from last night. I had about 300 login attempts on none existing accounts and 25 on one existing account, I've just changed that. I like ringfence its proactive and free.. good tool

89.46.100.162 Romania
91.102.115.84 Poland
142.4.210.157 Canada
91.204.116.164 France
37.143.76.118 Hungary
103.48.81.8 Vietnam
103.1.238.146 Vietnam
103.9.77.80 Vietnam
198.50.175.30 Canada
193.112.128.197 China

 

[Houdinii]

You might be interested in checking out http://iplists.firehol.org/ They comprehensively track many different types of blacklists, including malicious actors.

 

[Deleted member 657006]

I have multiple wordpress websites and i have couple of paid security softwares protecting my sites, they provide me a list of I/P addesses from where my site was attacked and i have noticed these are the same I/Ps which are attacking my other sites as well. Believe me my sites are not at all related to each other nor do they have any obvious footprint which means these are the I/Ps used by bad acotors and they must be attacking all the random wordpress websites. I have blocked/blacklisted these I/Ps on all my sites and i thought that i should let others know as well so i am putting a list here and i will try to update this list every couple of days so we can maintain an updated list. Please do let me know if you guys will be interested in the updated list so i can put some efforts daily to maintain the bad I/Ps list, Here is the list anyhow:-


IP Country
182.61.167.11 China
209.45.61.98 Peru
85.108.27.251 Turkey
78.169.166.59 Turkey
218.157.166.40 Korea, Republic of
85.214.24.93 Germany
160.153.154.8 United States
5.9.123.21 Germany
156.67.210.51 Singapore
23.238.18.46 United States
50.62.176.65 United States
136.243.2.7 Germany
89.46.105.177 Italy
83.136.216.101 Germany

wouldnt it be better if you made a plain website page so you can keep it always updated plus others can quickly use the info aswell .

just add the ip to the page then we can use the url live to ban the bleders

brillaint info .

 

[Deleted member 657006]

here a snippet to help those dont no php..

you add the ip from this post , send offending users to a website .

you stick the code at the very top of your login page .

this will help get rid of most falls .

<?php $deny = array("111.111.111", "222.222.222", "333.333.333"); if (in_array ($_SERVER['REMOTE_ADDR'], $deny)) { header("location: https://example.com/"); exit(); } ?>

to secure the page more add the recapcha code here
https://webdesign.tutsplus.com/tuto...-captcha-recaptcha-in-your-website--cms-23024

you can also add the ip of the person that submitted x times to try and gain access to a database and redirect them away anytime they come back .

 

[Purush]

Good initiative mate

 

[JimHalpert]

You might be interested in checking out http://iplists.firehol.org/ They comprehensively track many different types of blacklists, including malicious actors.

Good stuff. But may I know where exactly to click to get a complete list of IPs to be blocked? I can't find it.

Or are they just giving out stats and not the actual IPs?

 

[Houdinii]

Good stuff. But may I know where exactly to click to get a complete list of IPs to be blocked? I can't find it.

Or are they just giving out stats and not the actual IPs?

On the left hand side after you find a list on the main page (I'm on desktop), under the words 'Overview', you can select local copy, or they also have a link to the source that is updated consistently, good for software integration.

 

[JimHalpert]

On the left hand side after you find a list on the main page (I'm on desktop), under the words 'Overview', you can select local copy, or they also have a link to the source that is updated consistently, good for software integration.

Ah! Thank you Sir!

 

[mani.dxb007]

Top 10 IPs Blocked
IP Country Block Count
209.97.151.20 United States 84
162.144.96.64 United States 42
132.232.138.24 China 42
167.99.118.194 United States 42
165.22.26.231 United States 42
204.48.18.46 United States 42
165.227.210.52 United States 42
93.125.99.85 Belarus 42
159.65.131.58 Singapore 42

 

[Salamouna]

How to block them ?
any plugin?