Wp-Plugin

ByteSurfer · Okt 19, 2017

Guten Morgen,
ehrlich gesagt fuchse ich mich in Wordpress seit nun über 3 Monaten rein und komme langsam klar.

Meine Frage ist, wie handhabt ihr den Umgang mit Sicherheit, Spamschutz & Co (auch auf Basis geltender Datensachutz Bestimmungen) in WP?
Welche Art von Plugins machen Sinn - oder was sollte man anpassen/abändern.

Ich frage hier, weil die Informationen im Netz einen förmlich erschlagen und ich Schwierigkeiten habe das eine oder andere als sinnvoll/unsinnig zu bewerten.

vorab schon einmal vielen Dank ...

P.S. ich bin mir dessen bewusst dass ein 100% Schutz nie erreicht werden kann und halte WP zzgl eventuell verwendeter Plugins immer aktuell.
Auch habe ich Regeln seitens .htaccess erteilt um Zugriffe auf diverse Dateien zu verbieten (upgrade.php, install.php. *.txt usw ...).
Der Zugriff auf die xmlrpc.php Datei ist auch verboten und ssh und ftp abgeschaltet.

Das was ich als Seitenbetreiber ausmachen kann um SPAMER (welche nur Traffic erzeugen und die Statistic pushen) verbiete ich momentan noch via IP in der .htaccess.
Noch ist es überschaubar ....

bitmuncher · Okt 19, 2017

Gegen Spam benutze ich Antispam Bee. Akismet Anti-Spam ist allerdings besser, wenn man bereit ist dafür zu zahlen. Ansonsten habe ich noch Limit Login Attempts gegen Bruteforces im Einsatz.

In Blogs, wo ich der einzige Autor bin (also keine Multiblog-Netzwerke), nutze ich Jetpack. Das bietet auch einen Bruteforce-Schutz und in der bezahlten Version auch Backups. Der Bruteforce-Schutz von Jetpack ist etwas besser, weil er mit den Datenbanken von wordpress.com abgeglichen wird.

Zusätzlich habe ich aber auch Yubikey-plugin im Einsatz um eine brauchbare 2FA über meinen Yubikey zu haben. Das ist nahezu unmöglich zu bruteforcen.

ByteSurfer · Okt 20, 2017

Hallo,
vielen Dank erstmal.
Askimet ist ja von Hause aus deaktiviert, jedoch als Plugin installiert. Hier stoßen aber, so wie ich gelesen habe, diverse Gründe gegen unser geltendes deutsches Recht (Datenschutz) und das trotz Millionenfacher Installationen.
Begründung war, so glaube ich mich zu erinnern, die Weitergabe/der Abgleich mit Dritten wie die USA.
Jedoch, wo kein Kläger, da kein Angeklagter.

Die Namen der von dir genannten Plugin's sagen mir zum Glück etwas ...

Dann sehe ich mir die Plugin's

Antispam Bee
Limit Login Attempts
Jetpack
Yubikey-plugin

nochmal an ... :thumb_up:

Wenn jemand noch welcher an der Hand-/ bzw zu bestimmten eine Empfehlung hat ... nur immer her damit

ByteSurfer · Nov 6, 2017

Kleine Frage noch ...

Ich habe immer wieder Seitenaufrufe aus der Ukraine, Egypt, USA und Co. Nach manuellen Abgleich mit der Seite "StopForumSpam" sind diese als solches (SPAM) auch
identifiziert. Sie hinterlassen keine Kommentare, sonder Traffic in Form von einer Vielzahl an Aufrufen der Startseite.
Ob ich hier einem Bruteforce ausgesetzt bin kann ich nicht beantworten, bekomme immer den Aufruf der Hauptseite angezeigt - somit schließe ich es eigentlich vorab aus.

@bitmuncher
Hast du den Haken für einen IP basierten Abgleich mit einer externen Datenbank gesetzt, denn nach Recht und Gesetzt ist das ja fraglich.

bitmuncher · Nov 6, 2017

Ich habe bei mir großteils die IPs von APNIC ausgesperrt sowie einige andere Ranges, aus denen ich primär Bruteforces bekommen habe:

Code:

	$IPTABLES -A INPUT --source 95.213.128.0/17 -j DROP # ru (multiple wordpress attacks to get wp-config.php
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 80.89.128.0/19 -j DROP # ru (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 125.16.0.0/13 -j DROP # in (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 218.22.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 117.253.0.0/16 -j DROP # in (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 46.229.128.0/22 -j DROP # ru (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 222.160.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 59.44.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 36.32.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 150.129.44.0/22 -j DROP # in (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 176.98.168.0/21 -j DROP # ru (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 220.225.0.0/16 -j DROP # in (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 14.204.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 218.90.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 95.56.234.0/24 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 86.57.249.101 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 222.170.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 222.172.0.0/17 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 60.190.160.0/21 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 82.148.97.0/24 -j DROP # qa (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 58.44.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 182.74.233.0/24 -j DROP # in (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 92.39.64.0/20 -j DROP # ru (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 61.166.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 206.214.0.0/19 -j DROP # ba (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 82.148.97.0/24 -j DROP # qa (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 173.208.128.0/17 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 103.65.192.0/22 -j DROP # in (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 123.232.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 116.8.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 125.74.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 205.217.224.0/19 -j DROP # antigua (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 95.167.0.0/16 -j DROP # ru (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 89.17.32.0/19 -j DROP # ru (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 202.102.224.0/19 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 122.136.0.0/13 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 27.121.192.0/18 -j DROP # jp (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 218.88.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 103.21.200.0/22 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 60.28.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 222.184.0.0/13 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 213.138.74.0/24 -j DROP # ru (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 27.16.0.0/12 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 186.151.0.0/16 -j DROP # gt (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 111.192.0.0/12 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 124.64.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 111.125.143.0/24 -j DROP # in (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 59.124.0.0/14 -j DROP # tw (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 222.92.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 220.178.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 220.180.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 83.174.219.0/24 -j DROP # ru (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 83.174.220.0/23 -j DROP # ru (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 83.174.222.0/24 -j DROP # ru (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 220.163.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 220.164.0.0/15 -j DROP # ru (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 182.75.0.0/16 -j DROP # in (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 58.213.133.16/29 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 123.180.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 118.160.0.0/13 -j DROP # ru (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 218.93.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 176.124.144.0/22 -j DROP # ru (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 222.88.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 218.3.242.0/24 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 125.40.0.0/13 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 222.176.0.0/13 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 190.102.16.0/20 -j DROP # sx (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 218.2.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 218.4.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 123.112.0.0/12 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 222.240.0.0/13 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 61.32.0.0/13 -j DROP # kr (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 221.200.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 58.56.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 60.13.128.0/17 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 117.239.240.0/20 -j DROP # in (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 118.140.0.0/14 -j DROP # hk (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 114.104.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 61.136.64.0/18 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 60.166.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 60.168.0.0/13 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 222.222.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 111.0.0.0/10 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 60.24.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 60.28.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 60.30.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 218.204.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 61.182.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 176.103.208.0/21 -j DROP # ua (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 221.6.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 61.185.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 202.191.128.0/17 -j DROP # in (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 223.64.0.0/11 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 223.96.0.0/12 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 223.112.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 223.116.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 43.227.252.0/22 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 218.84.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 58.242.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 90.177.0.0/16 -j DROP # cz (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 203.88.128.0/20 -j DROP # in (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 202.199.224.0/20 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 203.145.134.0/24 -j DROP # in (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 61.150.0.0/17 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 178.248.64.0/21 -j DROP # ru (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 121.24.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 190.194.0.0/15 -j DROP # ar (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 58.208.0.0/12 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 221.4.32.0/19 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 176.115.96.0/21 -j DROP # ua (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 213.174.21.0/24 -j DROP # ua (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 175.139.0.0/16 -j DROP # my (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 61.191.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 218.92.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 1.80.0.0/13 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 123.138.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 183.65.17.0/24 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 78.192.0.0/10 -j DROP # fr proxad free sas (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 202.179.0.0/21 -j DROP # mn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 117.211.0.0/17 -j DROP # in (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 117.211.128.0/18 -j DROP # in (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 117.211.192.0/20 -j DROP # in (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 221.208.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 221.212.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 219.159.64.0/18 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 219.159.128.0/17 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 120.192.0.0/10 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 203.186.0.0/18 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 203.186.64.0/19 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 175.16.0.0/13 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 31.171.0.0/17 -j DROP # az (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 1.80.0.0/13 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 218.24.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 61.153.248.244/30 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 183.160.0.0/13 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 218.28.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 58.19.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 61.48.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 221.4.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 37.28.180.0/22 -j DROP # ru (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 123.4.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 112.0.0.0/10 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 27.184.0.0/13 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 60.14.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 122.227.136.168/30 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 190.7.144.0/20 -j DROP # co (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 218.107.0.0/18 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 91.193.252.0/22 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 221.192.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 1.202.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 183.192.0.0/10 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 58.244.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 218.56.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 58.17.0.0/17 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 91.225.84.0/22 -j DROP # cz (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 92.222.0.0/16 -j DROP # ovh sas (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 115.239.128.0/18 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 220.170.192.0/22 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 220.170.196.0/23 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 220.170.198.0/24 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 60.191.206.108/30 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 218.27.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 114.135.128.0/20 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 140.206.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 111.160.0.0/13 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 121.160.0.0/11 -j DROP # kr (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 221.238.231.32/28 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 180.234.6.0/23 -j DROP # bd (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 58.195.96.0/21 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 122.224.20.196/30 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 113.136.0.0/13 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 221.176.0.0/13 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 222.96.0.0/12 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 222.112.0.0/13 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 222.120.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 222.122.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 74.208.0.0/16 -j DROP # us (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 190.102.0.0/20 -j DROP # sx (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 185.148.221.0/24 -j DROP # ru (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 221.224.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 222.32.0.0/11 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 112.216.0.0/13 -j DROP # kr (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 113.200.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 110.152.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 194.28.180.0/22 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 122.0.0.0/8 -j DROP # apnic (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 220.0.0.0/8 -j DROP # apnic (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 61.183.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 61.184.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 218.62.128.0/17 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 218.63.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 61.133.192.0/19 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 218.26.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 123.128.0.0/13 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 58.60.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 154.0.0.0/8 -j DROP # mu (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 92.241.0.0/19 -j DROP # ru (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 221.130.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 46.29.113.0/24 -j DROP # ru (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 223.220.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 221.0.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 182.73.88.0/24 -j DROP # in (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 218.241.128.0/17 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 218.70.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 194.48.218.0/24 -j DROP # ru (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 61.163.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 61.164.181.188/30 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 116.248.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 111.112.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 42.115.0.0/20 -j DROP # vn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 60.247.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 103.238.15.0/24 -j DROP # in (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 113.194.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 218.200.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 60.10.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 61.134.0.0/18 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 203.192.192.0/18 -j DROP # in (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 110.36.0.0/14 -j DROP # pk (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 24.205.0.0/16 -j DROP # charter communication (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 202.129.56.0/23 -j DROP # th (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 202.129.58.0/24 -j DROP # th (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 60.220.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 116.52.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 211.232.0.0/17 -j DROP # kr (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 211.232.128.0/18 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 202.126.94.0/24 -j DROP # mn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 61.232.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 190.211.92.0/22 -j DROP # cr (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 209.59.64.0/18 -j DROP # ? (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 117.40.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 113.8.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 218.60.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 61.28.0.0/17 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 112.112.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 218.68.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 219.128.0.0/13 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 219.136.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 60.208.0.0/13 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 60.216.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 124.164.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 27.72.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 60.255.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 58.48.0.0/13 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 201.132.0.0/16 -j DROP # mx (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 153.36.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 115.238.240.0/20 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 117.128.0.0/10 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 218.200.0.0/13 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 221.224.0.0/13 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 113.31.80.0/20 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 190.210.128.0/18 -j DROP # ar (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 110.240.0.0/12 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 61.180.0.0/17 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 193.150.72.0/22 -j DROP # sk (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 124.128.0.0/13 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 124.118.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 117.32.0.0/13 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 221.3.128.0/17 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 185.17.132.0/22 -j DROP # ru (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 182.64.0.0/12 -j DROP # in (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 124.114.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 124.128.0.0/13 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 61.158.128.0/17 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 182.50.128.0/19 -j DROP # sg (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 196.0.0.0/8 -j DROP # afrinic (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 69.195.192.0/18 -j DROP # verizon business (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 119.144.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 218.76.144.0/20 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 219.138.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 219.140.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 61.188.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 114.119.0.0/17 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 121.32.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 218.72.249.152/29 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 210.73.0.0/19 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 177.75.64.0/20 -j DROP # br (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 103.24.154.0/23 -j DROP # hk (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 117.64.0.0/13 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 218.87.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 211.140.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 221.236.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 125.80.0.0/13 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 1.188.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 121.8.0.0/13 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 211.136.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 202.110.64.0/18 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 138.118.4.0/22 -j DROP # br (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 210.82.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 125.72.92.0/24 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 42.159.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 61.161.128.0/17 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 213.87.106.0/23 -j DROP # ru (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 177.67.208.0/21 -j DROP # br (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 221.207.0.0/18 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 181.110.233.208/29 -j DROP # ar (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 60.13.0.0/18 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 61.131.3.224/27 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 153.156.0.0/17 -j DROP # jp (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 61.82.0.0/15 -j DROP # kr (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 61.84.0.0/15 -j DROP # kr (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 125.35.0.0/17 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 219.232.96.0/19 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 218.76.128.0/20 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 219.154.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 179.208.0.0/14 -j DROP # br (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 219.0.0.0/8 -j DROP # apnic5 (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 61.177.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 120.40.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 218.108.16.152/29 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 211.92.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 42.104.64.0/18 -j DROP # in (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 109.226.23.0/24 -j DROP # il (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 58.22.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 58.20.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 125.212.128.0/17 -j DROP # vn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 124.173.0.0/16 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 177.22.80.0/20 -j DROP # br (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 61.52.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 116.112.0.0/14 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 60.194.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 103.24.124.0/22 -j DROP # in (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 128.134.0.0/16 -j DROP # kr (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 62.16.96.0/19 -j DROP # ru (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 14.32.0.0/11 -j DROP # kr (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 14.64.0.0/11 -j DROP # kr (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 114.0.0.0/8 -j DROP # apnic (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 202.0.0.0/8 -j DROP # apnic (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 171.208.0.0/12 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 211.142.0.0/17 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 218.0.0.0/8 -j DROP # apnic (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 58.0.0.0/8 -j DROP # apnic (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 124.0.0.0/8 -j DROP # apnic (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 211.196.0.0/14 -j DROP # kr (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 178.210.128.0/19 -j DROP # ua (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 27.192.0.0/11 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 211.0.0.0/8 -j DROP # apnic (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 84.211.0.0/17 -j DROP # no (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 124.0.0.0/8 -j DROP # apnic (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 117.24.0.0/13 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 181.193.80.0/20 -j DROP # cr (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 119.92.0.0/14 -j DROP # ph (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 187.237.0.0/16 -j DROP # mx (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 178.234.0.0/17 -j DROP # ru (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 178.234.128.0/19 -j DROP # ru (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 178.234.160.0/20 -j DROP # ru (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 14.134.0.0/15 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 124.0.0.0/8 -j DROP # apnic (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 120.0.0.0/12 -j DROP # cn (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 189.202.128.0/17 -j DROP # mx (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 222.0.0.0/8 -j DROP # apnic (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 211.0.0.0/8 -j DROP # apnic (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 92.103.199.128/28 -j DROP # fr (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 125.0.0.0/8 -j DROP # apnic (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 203.0.0.0/8 -j DROP # apnic (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 36.0.0.0/8 -j DROP # apnic (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 62.99.80.128/32 -j DROP # es (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 118.0.0.0/8 -j DROP # apnic (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 61.0.0.0/8 -j DROP # apnic (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 178.161.128.0/19 -j DROP # ru (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 62.94.244.0/24 -j DROP # it (wp bruteforce)
	$IPTABLES -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source 115.84.64.0/18 -j DROP # la (wp bruteforce)

Kann sein, dass da einige Ranges mehrfach vertreten sind, weil ich mit der kompletten Sperrung der zugehörigen APNIC-Ranges (zumeist /8er) erst später angefangen habe. Ich müsste da wohl mal aufräumen.

Edit: Falls du iptables nicht verwenden kannst/willst, dann hier nochmal die Liste der reinen IP-Ranges:

Code:

95.213.128.0/17
80.89.128.0/19
125.16.0.0/13
218.22.0.0/15
117.253.0.0/16
46.229.128.0/22
222.160.0.0/14
59.44.0.0/14
36.32.0.0/14
150.129.44.0/22
176.98.168.0/21
220.225.0.0/16
14.204.0.0/15
218.90.0.0/16
95.56.234.0/24
86.57.249.101
222.170.0.0/15
222.172.0.0/17
60.190.160.0/21
82.148.97.0/24
58.44.0.0/14
182.74.233.0/24
92.39.64.0/20
61.166.0.0/16
206.214.0.0/19
82.148.97.0/24
173.208.128.0/17
103.65.192.0/22
123.232.0.0/14
116.8.0.0/14
125.74.0.0/15
205.217.224.0/19
95.167.0.0/16
89.17.32.0/19
202.102.224.0/19
122.136.0.0/13
27.121.192.0/18
218.88.0.0/15
103.21.200.0/22
60.28.0.0/15
222.184.0.0/13
213.138.74.0/24
27.16.0.0/12
186.151.0.0/16
111.192.0.0/12
124.64.0.0/15
111.125.143.0/24
59.124.0.0/14
222.92.0.0/14
220.178.0.0/15
220.180.0.0/16
83.174.219.0/24
83.174.220.0/23
83.174.222.0/24
220.163.0.0/16
220.164.0.0/15
182.75.0.0/16
58.213.133.16/29
123.180.0.0/14
118.160.0.0/13
218.93.0.0/16
176.124.144.0/22
222.88.0.0/15
218.3.242.0/24
125.40.0.0/13
222.176.0.0/13
190.102.16.0/20
218.2.0.0/15
218.4.0.0/16
123.112.0.0/12
222.240.0.0/13
61.32.0.0/13
221.200.0.0/14
58.56.0.0/14
60.13.128.0/17
117.239.240.0/20
118.140.0.0/14
114.104.0.0/14
61.136.64.0/18
60.166.0.0/15
60.168.0.0/13
222.222.0.0/15
111.0.0.0/10
60.24.0.0/14
60.28.0.0/15
60.30.0.0/16
218.204.0.0/15
61.182.0.0/16
176.103.208.0/21
221.6.0.0/16
61.185.0.0/16
202.191.128.0/17
223.64.0.0/11
223.96.0.0/12
223.112.0.0/14
223.116.0.0/15
43.227.252.0/22
218.84.0.0/16
58.242.0.0/15
90.177.0.0/16
203.88.128.0/20
202.199.224.0/20
203.145.134.0/24
61.150.0.0/17
178.248.64.0/21
121.24.0.0/14
190.194.0.0/15
58.208.0.0/12
221.4.32.0/19
176.115.96.0/21
213.174.21.0/24
175.139.0.0/16
61.191.0.0/16
218.92.0.0/16
1.80.0.0/13
123.138.0.0/15
183.65.17.0/24
78.192.0.0/10
202.179.0.0/21
117.211.0.0/17
117.211.128.0/18
117.211.192.0/20
221.208.0.0/14
221.212.0.0/16
219.159.64.0/18
219.159.128.0/17
120.192.0.0/10
203.186.0.0/18
203.186.64.0/19
175.16.0.0/13
31.171.0.0/17
1.80.0.0/13
218.24.0.0/15
61.153.248.244/30
183.160.0.0/13
218.28.0.0/15
58.19.0.0/16
61.48.0.0/14
221.4.0.0/16
37.28.180.0/22
123.4.0.0/14
112.0.0.0/10
27.184.0.0/13
60.14.0.0/15
122.227.136.168/30
190.7.144.0/20
218.107.0.0/18
91.193.252.0/22
221.192.0.0/14
1.202.0.0/15
183.192.0.0/10
58.244.0.0/15
218.56.0.0/14
58.17.0.0/17
91.225.84.0/22
92.222.0.0/16
115.239.128.0/18
220.170.192.0/22
220.170.196.0/23
220.170.198.0/24
60.191.206.108/30
218.27.0.0/16
114.135.128.0/20
140.206.0.0/15
111.160.0.0/13
121.160.0.0/11
221.238.231.32/28
180.234.6.0/23
58.195.96.0/21
122.224.20.196/30
113.136.0.0/13
221.176.0.0/13
222.96.0.0/12
222.112.0.0/13
222.120.0.0/15
222.122.0.0/16
74.208.0.0/16
190.102.0.0/20
185.148.221.0/24
221.224.0.0/14
222.32.0.0/11
112.216.0.0/13
113.200.0.0/15
110.152.0.0/14
194.28.180.0/22
122.0.0.0/8
220.0.0.0/8
61.183.0.0/16
61.184.0.0/16
218.62.128.0/17
218.63.0.0/16
61.133.192.0/19
218.26.0.0/16
123.128.0.0/13
58.60.0.0/14
154.0.0.0/8
92.241.0.0/19
221.130.0.0/15
46.29.113.0/24
223.220.0.0/15
221.0.0.0/15
182.73.88.0/24
218.241.128.0/17
218.70.0.0/16
194.48.218.0/24
61.163.0.0/16
61.164.181.188/30
116.248.0.0/15
111.112.0.0/15
42.115.0.0/20
60.247.0.0/16
103.238.15.0/24
113.194.0.0/15
218.200.0.0/14
60.10.0.0/16
61.134.0.0/18
203.192.192.0/18
110.36.0.0/14
24.205.0.0/16
202.129.56.0/23
202.129.58.0/24
60.220.0.0/14
116.52.0.0/14
211.232.0.0/17
211.232.128.0/18
202.126.94.0/24
61.232.0.0/14
190.211.92.0/22
209.59.64.0/18
117.40.0.0/14
113.8.0.0/15
218.60.0.0/15
61.28.0.0/17
112.112.0.0/14
218.68.0.0/15
219.128.0.0/13
219.136.0.0/15
60.208.0.0/13
60.216.0.0/15
124.164.0.0/14
27.72.0.0/14
60.255.0.0/16
58.48.0.0/13
201.132.0.0/16
153.36.0.0/15
115.238.240.0/20
117.128.0.0/10
218.200.0.0/13
221.224.0.0/13
113.31.80.0/20
190.210.128.0/18
110.240.0.0/12
61.180.0.0/17
193.150.72.0/22
124.128.0.0/13
124.118.0.0/15
117.32.0.0/13
221.3.128.0/17
185.17.132.0/22
182.64.0.0/12
124.114.0.0/15
124.128.0.0/13
61.158.128.0/17
182.50.128.0/19
196.0.0.0/8
69.195.192.0/18
119.144.0.0/14
218.76.144.0/20
219.138.0.0/15
219.140.0.0/16
61.188.0.0/16
114.119.0.0/17
121.32.0.0/14
218.72.249.152/29
210.73.0.0/19
177.75.64.0/20
103.24.154.0/23
117.64.0.0/13
218.87.0.0/16
211.140.0.0/15
221.236.0.0/15
125.80.0.0/13
1.188.0.0/14
121.8.0.0/13
211.136.0.0/14
202.110.64.0/18
138.118.4.0/22
210.82.0.0/16
125.72.92.0/24
42.159.0.0/16
61.161.128.0/17
213.87.106.0/23
177.67.208.0/21
221.207.0.0/18
181.110.233.208/29
60.13.0.0/18
61.131.3.224/27
153.156.0.0/17
61.82.0.0/15
61.84.0.0/15
125.35.0.0/17
219.232.96.0/19
218.76.128.0/20
219.154.0.0/15
179.208.0.0/14
219.0.0.0/8
61.177.0.0/16
120.40.0.0/14
218.108.16.152/29
211.92.0.0/15
42.104.64.0/18
109.226.23.0/24
58.22.0.0/15
58.20.0.0/16
125.212.128.0/17
124.173.0.0/16
177.22.80.0/20
61.52.0.0/15
116.112.0.0/14
60.194.0.0/15
103.24.124.0/22
128.134.0.0/16
62.16.96.0/19
14.32.0.0/11
14.64.0.0/11
114.0.0.0/8
202.0.0.0/8
171.208.0.0/12
211.142.0.0/17
218.0.0.0/8
58.0.0.0/8
124.0.0.0/8
211.196.0.0/14
178.210.128.0/19
27.192.0.0/11
211.0.0.0/8
84.211.0.0/17
124.0.0.0/8
117.24.0.0/13
181.193.80.0/20
119.92.0.0/14
187.237.0.0/16
178.234.0.0/17
178.234.128.0/19
178.234.160.0/20
14.134.0.0/15
124.0.0.0/8
120.0.0.0/12
189.202.128.0/17
222.0.0.0/8
211.0.0.0/8
92.103.199.128/28
125.0.0.0/8
203.0.0.0/8
36.0.0.0/8
62.99.80.128/32
118.0.0.0/8
61.0.0.0/8
178.161.128.0/19
62.94.244.0/24
115.84.64.0/18

ByteSurfer · Nov 6, 2017

Danke

Ummpf ...

... eine Menge Holz

Ich gehe davon aus das ich die IP Bereiche in meiner .htaccess integrieren kann und den Zugriff auf deny setze.
Da ich dich hier ja schon länger kenne und deine Aussagen und Beiträge schätze (nicht falsch verstehen) denke ich das blind übernehmen zu können ... !?

bitmuncher · Nov 6, 2017

Damit du es nicht ganz blind übernehmen musst, hier kurz die Prozedur wie die Ranges ermittelt wurden...

Zuerst einmal stammt das alles von einem Honeypot. Dieser füttert seine Daten in ein IDS, das ermittelt, ob Zugriffe auf wp-login.php erfolgt sind. Finden mehr als 5 Zugriffsversuche statt, geht ein Alert an mich und ich ermittle via 'whois <IP>' den Provider und seine Range. Alles, wovon ich keinen Traffic in meinem WP-Netzwerk brauche, blockiere ich dann mittels eines Firewall-Skripts (geht natürlich auch via htaccess).

Im Klartext heisst das: Ranges aus Europa blocke ich nur, wenn sie besonders intensiv auffallen (d.h. mehr als 20 Versuche oder sehr viele Versuche von IPs aus der gleichen Range) oder wenn sie von Rechenzentren sind. Asien blockiere ich immer. Und in Amerika blocke ich vor allem Südamerika (Brasilien ist bei WP-Bruteforces sehr penetrant) und Rechenzentren der USA.

Da mir vor allem die Chinesen und Koreaner in letzter Zeit enorm auf den Zeiger gingen (die haben mittlerweile recht große Botnetze dort), habe ich angefangen APNIC komplett auszusperren. Von dort kommt eh kein brauchbarer Traffic für deutschsprachige Blogs.

Natürlich muss man immer sehen welche Zielgruppe man hat. Will man Touristeninformationen bereitstellen, macht es natürlich wenig Sinn halb Asien auszusperren. Gleiches gilt für Seiten, die primär dazu dienen mittels Werbung Geld zu verdienen. Da zählt ja jeder Aufruf, selbst wenn er von Bots stammt. Und bei Porno-Netzwerken würde ich die Asiaten auch nicht unbedingt aussperren. Die tummeln sich gern auf Seiten mit europäischen Mädels und können erheblich Werbeeinnahmen einbringen.

ByteSurfer · Nov 7, 2017

Danke für die ausführliche Beschreibung!
Da ich nur aus Leidenschaft und Spaß an der Freude nicht kommerziell blogge ist für mich nur der deutschsprachige Raum von Interesse. So wie ich das verstehe und lese sollten
deine IP Ranges hier kein Hindernis darstellen und den deutsche Raum gewähren lassen

Danke Dir, ich werde diese 1:1 in die .htaccess einbauen

Äh, räusper ... schränke ich die Suchmaschinen Bots auch komplett ein ... ?

bitmuncher · Nov 7, 2017

ByteSurfer hat gesagt.:
Äh, räusper ... schränke ich die Suchmaschinen Bots auch komplett ein ... ?

Ein paar kleinere aus Asien vermutlich schon. IP-Ranges von Google, Bing, Yandex & Co sind allerdings nicht darunter. Die senden ja auch üblicherweise keine Usernamen und Passwörter an die wp-login.php und tauchen im Whois dann ja auch mit ihrer Firma auf, d.h. die hosten nicht in irgendwelchen unternehmensfremden Rechenzentren.

ByteSurfer · Nov 7, 2017

Das stimmt ...

ByteSurfer · Nov 8, 2017

Die IP Bereiche sind in der .htaccess integriert und es wurde augenscheinlich auch weniger mit den Zugriffen.
Also nochmal vielen Dank für deine IP Liste :thumb_up:

Trotzdem bleibt eine weitere Frage ...
Momentan bleibt lediglich China noch mit IPv6 Adressen im rennen und stellt auch weiterhin Anfragen.
Muss ich diese IPV6 Adressen HEX zu DEC Umrechen in eine IP, oder kann ich hier den kompletten Block (IPv6/HEX) so belassen und lediglich auf deny setzen in der .htaccess ?

bitmuncher · Nov 9, 2017

Soweit ich weiss kannst du IPv6-Ranges in der Form 2001:db8:2:1::/64 angeben. So steht's auch in der Doku von mod_authz_host: mod_authz_host - Apache HTTP Server Version 2.4 (siehe Require-Direktive)

ByteSurfer · Nov 10, 2017

Was ist das - 02:24 Uhr - Helden brauchen keinen Schlaf :wink:

Ich werden mir das Document nochmal in Ruhe durchlesen, denn gerade beim überfliegen stand ich im Bahnhof ...

bitmuncher · Nov 10, 2017

Bezüglich IPv6 ist der wichtige Teil dieser:

IPv6 addresses and IPv6 subnets can be specified as shown below:

Code:

Require ip 2001:db8::a00:20ff:fea7:ccea
Require ip 2001:db8:1:1::a
Require ip 2001:db8:2:1::/64
Require ip 2001:db8:3::/48

Edit: Erfahrungsgemäss ist Apache sehr gleichförmig, weswegen das (d.h. CIDR-Notation) auch für andere Direktiven, die IPs benötigen, funktionieren sollte. Leider ist nicht immer alles dokumentiert. Den obigen Abschnitt findest du z.B. nicht in der deutschen Doku.

ByteSurfer · Mrz 13, 2018

Sinn oder Unsinn ...
Da ich mich doch intensiver mit der Thematik auseinander setzen will, wollte ich hier im öffentlichen Bereich doch das eine oder andere erfragen, bzw. diskutieren.

Wie erwähnt steht hier eine Wordpress Applikation im Hintergrund, welche im privaten Sinne (Blog) betrieben wird. Seit geraumer Zeit nerven mich die, so denke ich, Traffic produzierenden Bots/Spams.
Dank bitmuncher und seiner Unterstützung habe ich eine Gruppierung aus Asien seit einigen Tagen nicht mehr auf meiner Seite wahrnehmen können. Sprich die Location zeigt mir keine IP mehr aus dem Bereich an.
Das bedeutet nicht das diese nicht über Afrika kommen können.

Die Vorgehensweise war relativ einfach, da hier diverse Ranges aus Asien via .htaccess gesperrt wurden.

Nun habe ich eine IP, wo ich mich frage wie weit oder mit welcher Vorgehensweise ich das Ganze eindämmen will.... Deswegen der Context hier zu Anfang - Sinn oder Unsinn

Nehmen wir folgendes Beispiel an:

Die whois Abfrage liefert mir zu der IP 13.27.xxx.xxx eine Range von 13.15.0.0 - 13.127.255.254
Somit kommt Subnetz A aus dem 13ner Bereich und die Range ist Mittelamerika zuzuorden.

Nun, für meine Seite interessiert mich generell nur der deutschsprachige Raum, somit könnte ich doch generell alle die aus dem Bereich
13.15.0.0 kommen auf deny setzen. Wäre das aber nicht zu heftig bzw übertrieben?

Gesetz den Fall müsste ich 13.127.255.254 annehmen und würde bis 13.128.0.0 alle blocken.
Dual wären das dann 1111 1111 1000 0000 0000 0000 0000 0000 und es käme deny from 13.27.0.0 / 9 heraus, so dass 6567525 (hoffentlich habe ich mich jetzt nicht verrechnet) amerikanische Bürger gesperrt werden.

Ist das nicht etwas übertrieben oder sollte man ("ich") die Denkweise/Herangehensweise ändern?

Greetz

Wp-Plugin

ByteSurfer

0

bitmuncher

Senior-Nerd

ByteSurfer

0

ByteSurfer

0

bitmuncher

Senior-Nerd

ByteSurfer

0

bitmuncher

Senior-Nerd

ByteSurfer

0

bitmuncher

Senior-Nerd

ByteSurfer

0

ByteSurfer

0

bitmuncher

Senior-Nerd

ByteSurfer

0

bitmuncher

Senior-Nerd

ByteSurfer

0