[Admin]

Hi guys,

I've been saving up some information about hackers, mainly their IP addresses, so people who have forums or who use WordPress and Joomla CMS can block them if they like. I'm also putting a list of IPaddresses for known spammers.

Anyway, here's the IP list for known hackers:


196.1.176.195
41.211.230.22
209.40.206.222
209.40.206.221
41.211.226.185
213.232.92.35
193.93.98.197
41.219.204.31
213.140.16.185
200.176.144.170
205.234.141.149
202.122.13.154
202.123.27.136
82.59.77.70
189.63.45.12
125.162.44.181
82.128.6.17
213.194.124.84
83.168.205.154
41.223.251.19
82.128.7.166
82.128.34.213
125.245.27.141
82.128.26.196
202.60.64.56
222.234.1.78
125.247.151.130
41.211.238.228
151.1.141.17
210.240.50.2
202.180.216.12
212.109.149.250
81.21.69.107
84.19.178.201
83.143.184.2
193.201.32.10
62.75.160.72
213.193.222.218
74.53.24.226
202.64.77.93
202.75.39.66
208.99.194.216
209.97.199.252
87.118.118.7
69.64.87.7
63.246.27.143
87.118.118.138
74.200.224.58
81.176.226.180
217.13.86.10
82.194.71.79
207.157.58.25
64.185.237.143
67.19.49.228
67.15.36.104
144.202.249.223
211.78.4.202
80.38.62.39
208.116.0.130
84.40.23.83
61.63.3.45
67.15.12.20
64.223.244.42
218.185.20.38
72.47.200.153
90.185.233.233
72.55.143.196
216.75.63.66
220.83.122.111
66.192.152.130
88.199.89.45
213.228.158.38
66.115.160.223
86.39.130.197
220.232.149.22
83.69.224.34
80.146.190.5
85.196.88.214
213.228.185.13
89.110.149.154
77.91.203.33
83.18.135.166
64.185.237.35
83.226.209.39
202.30.198.117
213.211.129.186
81.21.192.212
89.149.242.224
81.90.160.66
207.44.154.126
64.13.248.83
195.154.193.51
213.246.63.30
80.233.176.135
193.174.120.1
77.91.201.24
65.98.113.226
66.96.233.241
216.184.96.158
211.220.195.20
64.246.22.2
209.200.229.25
121.254.228.147
72.29.73.35
213.113.108.77
121.254.170.200
163.24.17.10
61.38.198.67
81.31.47.2
211.42.98.241
64.148.130.30
211.239.166.24
66.223.110.108
222.73.5.138
204.10.137.128
74.208.69.118
69.10.154.114
209.200.252.11
69.16.243.89
85.214.86.231
86.109.98.97
64.34.203.197
85.114.132.12
204.92.87.131
85.17.105.186
77.74.195.98
204.10.243.102
118.127.2.108
205.234.253.11
193.46.236.155
87.106.71.127
62.193.245.189
75.126.204.50
203.146.251.62
80.241.161.90
70.85.94.226
64.92.170.171
203.252.163.128
140.99.41.2
212.87.33.99
72.29.67.38
72.29.70.163
206.248.137.22
202.174.109.134
64.141.103.91
85.25.149.67
64.20.46.121

69.216.175.132
209.200.235.106
200.80.42.159
64.38.199.175
80.67.27.193
209.85.52.146
206.221.184.180
203.22.204.188
85.114.132.91
77.245.149.70
61.67.120.48
60.249.42.221
60.249.45.142
62.112.193.46
64.34.165.227
69.50.214.191
72.10.167.50
83.175.248.213
78.111.108.101
67.212.173.74
87.118.100.55
67.18.241.218
85.17.6.6
70.84.7.82
88.84.147.120
83.172.144.57
80.249.117.99
72.249.126.135
62.68.203.50
64.182.4.97
74.53.10.194
81.201.105.162
64.34.173.70
74.52.9.218
69.13.6.70
66.201.232.41
216.55.160.165
85.18.115.179
211.115.110.89
66.7.205.115
83.19.144.26
82.192.70.11
195.155.232.37
209.62.80.134
66.232.152.100
67.15.58.22
64.6.233.142
212.143.214.138
122.201.82.63
195.205.178.120
203.23.237.236
213.219.217.74
195.95.198.223
83.137.193.66
193.91.99.14
80.69.80.64
84.244.191.5
212.104.223.2
208.69.57.243
216.104.37.122
221.139.3.229
74.200.71.41
72.5.250.201
72.36.146.2
83.18.192.226
87.230.7.194
84.40.17.23
69.94.56.40
91.121.69.192
208.99.222.66
64.141.102.51
69.20.9.225
82.98.141.70
216.18.70.212

There may be a couple of duplicates that I missed, so disregard them.

If anybody else wants to add to the list, just post the IP addresses here in this thread.

I'll add to the original post when I come across more.

Hope this helps ...


Admin

[Admin]

The subject of hackers can be very scary to some people. If you've ever been hacked or heard the horror storys from people who have been hacked, you can figure out why they might be afraid.

I've seen full blown businesses get hacked where the owner lost everything. And I'm talking about very big businesses too! To me it doesn't matter if your business is big or little. What does matter is your livelyhood or where and how you make your money to live on. If you run an Internet Business like some of these folks who lost their business, then you should pay close attention to the security of your site and server.

I know I l.ost 3 very good money makers for me in that run of security issues concerning Joomle 1.5. But I will say that I was able to save about 20 other websites that were hacked which is a very good thing.

Since I put this forum up, we've had at least 23 hacker attempts just on this one forum in the past 2-3 weeks. And plenty of spammers too. I have a good Mod that catches the spammers, but it doesn't always catch the hackers. This is why I keep a current list, so I can add them in my deny IP address in my control panel. What this does, is automatically incert the added IP address into the dot htaccess file that is on your server. Once it is in there, that IP addres is blocked, and the user cannot see the site.

There are also some softwares out there you can buy that locks everything up when a hack attempt is made, but many of the ones I looked at are expensive. BUT I'm cheap lol and still do things the good ole fashion way.

This will not stop hack attempts totally, but will slow them down to a crawl. If someone wants to hack your site and have been hacking for some time, they will find a way to exploit the holes in your server whether it be your FTP access, email system, router, server, etc ...

Here are a few basic things you can do to slow them down:

Make sure you use very long passwords. Ones with letters, numbers, and punctuation marks. I use semi colins and wildcards.

Change your passwords periodically.

For goodness sake, do not use the same password for your other sites, email clients, or anything else. Use different ones for each place you have to log into. And especially don't use your payment processor login info like for PayPal, and such for any of your sites. Hackers are smart enough to look up information, so they can find out every place you log in. All they do is have to Google for that info.

And lastly, block the IP addresses in the list that I gave you.

[aakay4u]

Thanks for this vital information.You did a great job in collecting the data.I too am a victim of being hacked and it had cost me very dearly.Now atleast will block the IP addresses you have mentioned but then there are many others.However,will follow your tips.Thanks again.

[mignarde20]

Wow, thanks! I recently started up a wordpress blog, and was wondering how to tackle the problem of hackers getting into my administration area. There are other safeguards you can use to stop hackers, but blocking their IP is the quickest and easiest way.

That's quite an impressive list, I'll be sure to save it. Thanks again for your efforts!

[aryaman2008]

You have done a great job in collecting so many IP addresses of hackers.They are really sinful people and something should be devised that no hacking of any sort can take place ever,but with internet and programming scripts being so vulnerable,it seems unlikey that there will ever be a permanent solution to this problem.

[TheoGio]

Uh, oh. I practice some of the things you recommend not doing. What are the results when a hacker gets in?

I have McCavy for security. And my cable company has security also. Don't these things protect you?

[Admin]

Originally Posted by TheoGio

Uh, oh. I practice some of the things you recommend not doing. What are the results when a hacker gets in?

I have McCavy for security. And my cable company has security also. Don't these things protect you?

Hey TheoGio,

The results can mean the loss of your sites and sometimnes hosting accounts. I've seen entire businesses that have been running on the INternet for years get stolen or hacked so badly where viruses were installed that the businesses/sites were no longer useful, and had to be built all over.

McCavy is okay for your PC, but this info about hackers is for your hosting accounts and servers.

What you can do is deny these IP addresses from viewing your site and content inside and out by entering them in your hosting account cpanel. Now this won't stop them completely, but it sure will slow them down a lot.

[TheoGio]

I don't know how to thank you enough...for the addresses and the education. Bless you!There is just so very much to know, I hope I can do it all.

I have just added more than half. I had to do each one indivicually, so I need to take a break. My hand is about ready to fall off.

[Admin]

No Problem TheoGio,

Lol I know what you mean by all the entries, I have many sites, and it does get to be a pain, but well worth it in the end as I don't seemed to get hacked as much.

Btw, there are always new IP addresses poping up on the net, so if anyone else has some to add feel free to add them in the thread.

[yasha1]

Thank for providing such a meaningfull information. These scamers are really harm society. One day i was also suffered from this. When i got a $300 check from some company and they told me to cash it and send money by internet. But fortunately i have not done that task otherwise i would be in trouble..

[rankbo]

hm, i bet that most of them are a list of anonymous proxy servers ... and will not help you very much especially that nowadays most internet users have dynamic ip. You should have a good firewall that blocks the flooding, and use image verification and e-mail for registration. Blocking the ips is not a permanent solution but o very fast one, until you solve other problems.

[Admin]

Originally Posted by rankbo

hm, i bet that most of them are a list of anonymous proxy servers ... and will not help you very much especially that nowadays most internet users have dynamic ip. You should have a good firewall that blocks the flooding, and use image verification and e-mail for registration. Blocking the ips is not a permanent solution but o very fast one, until you solve other problems.

Yes, you are right, the list contains mostly proxy IP addresses but how valuable the list is depends on other variables and how knowledgeable people are in using the list.

I know adding this list of IP addresses help forum and blog owners quite a bit actually if you know how to use a list like this.

[shekdp]

I believe generally hackers use proxies, as they don't want to be in any kind of legal case, am I right ?
If yes, then how is that list useful ?
If no, then hackers might have bought new ip as they must be knowing that there ip are listed on internet, right ?
So, we can never be sure of these ips
We have to be careful with all the ip address

[Admin]

Shek,

Yes they're useful as I mentioned above.

Even if the hacker buys and uses different ones, you can still add the new addresses to your cpanel and .htaccess file so they can't register with them again. You can also add them to the backend of VBulletin too so they are banned forever.


.

Originally Posted by shekdp

I believe generally hackers use proxies, as they don't want to be in any kind of legal case, am I right ?
If yes, then how is that list useful ?
If no, then hackers might have bought new ip as they must be knowing that there ip are listed on internet, right ?
So, we can never be sure of these ips
We have to be careful with all the ip address

[shekdp]

Probably you are correct, but don't you think buying new ip is very easy & less costly ?
In my country I just pay around $10 per month for an ip, and suppose hackers knows tat in 1 month he/she can get information worth more than $100, then anyone would change there every month

Also, ISP give the ips which aren't used by that hacker to another customer if another customer approaches (as ip's are reusable ) them for internet connection and by blocking those ip's indirectly we are blocking genuine user, right ?
I agree that it could be effective, but my point is not to that extent

There are other ways more effective than this one, like by increasing encryption level and using public key encryption for webpages

[Admin]

Shek,

Yeah, it is easy and less costly lol, but that isn't the jest of this discussion.

In truth, I can actually change my local IP address for nothing if I want to. All I have to do is reset my ISP modem and hold it for like 10 seconds lol. Whoever is charging $10 is making good money ripping people off. LD

That could be so, but I'm willing to lose a few sign ups in order to keep the trash out of here. Most of the time, these IP addresses never get to someone else because they are usually banned amd marked or flagged as bad IPs. ISP providers know when the IP addresses are banned by other routers or servers, and they don't redistribute them because the main ones that communicate with the ISP providers' routers and servers will let them know they are flagged. In most cases, it is either because they've abused the system in ways such as email spamming, etc ... or were alerted by another provider.

Picture the other routers and/or servers as gate keepers between the various servers. They are always updated and communicating back and forth.

The method that I used above is a very simple way of guarding the site and server. But yeah, people can use a higher level of encryption on their sites/servers too if that's what they choose.

Originally Posted by shekdp

Probably you are correct, but don't you think buying new ip is very easy & less costly ?
In my country I just pay around $10 per month for an ip, and suppose hackers knows tat in 1 month he/she can get information worth more than $100, then anyone would change there every month

Also, ISP give the ips which aren't used by that hacker to another customer if another customer approaches (as ip's are reusable ) them for internet connection and by blocking those ip's indirectly we are blocking genuine user, right ?
I agree that it could be effective, but my point is not to that extent

There are other ways more effective than this one, like by increasing encryption level and using public key encryption for webpages

[shekdp]

It was actually part of discussion, as I was telling that hackers can buy new ips and come again and again
For money ISP's redistribute ip in some states

So, if you feel some sign-ups don't matter, then it is fine & then the list is useful..

[inhalantraptor]

Hey, buddy i don't mean to burst your bubble but a smart hacker changes their ip every two weeks as do I i scanned 407 of your "hacker addresses" and none of them are online so this entire thread is a waste of time no offense but if you don't believe me then go download a port scanner called nmap and check yourself no host's are online from that list