Archives de catégorie : Sécurité

Google LLC : Grosse augmentation des attaques

En passant

Répondre

J’ai donc bloqué énormément d’IP. J’ai l’impression que Goofle LLC est en mode openbar.

Misère.

IN REJECT -source 34.87.208.0/20 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 104.154.176.0/20 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 34.152.48.0/20 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 34.89.144.0/20 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 34.162.128.0/18 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 34.16.128.0/17 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 34.125.128.0/20 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 34.128.96.0/19 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 34.125.0.0/20 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 34.158.128.0/18 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 34.50.160.0/19 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 8.229.0.0/16 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 34.182.0.0/17 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 35.252.128.0/17 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 136.118.128.0/17 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 34.186.128.0/18 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 35.202.144.0/20 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 136.112.0.0/16 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 34.21.0.0/17 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 35.205.208.0/20 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 34.186.0.0/19 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 34.53.128.0/17 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 136.107.128.0/17 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 34.6.0.0/16 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 34.52.128.0/17 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 34.21.128.0/17 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 35.237.0.0/16 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 34.181.128.0/17 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 34.82.0.0/20 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 136.119.0.0/16 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 34.19.206.0/24 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 34.186.2.0/24 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 136.107.230.0/24 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 136.107.99.0/24 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 34.165.227.0/24 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 104.196.50.0/24 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 34.10.64.0/24 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 34.172.214.0/24 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 34.68.34.0/24 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 162.216.150.0/24 -p tcp -log notice # bc.googleusercontent.com
IN REJECT -source 35.231.155.0/24 -p tcp -log warning # bc.googleusercontent.com
IN REJECT -source 34.148.130.0/24 -p tcp -log warning # bc.googleusercontent.com
IN REJECT -source 34.139.222.0/24 -p tcp -log warning # bc.googleusercontent.com
IN REJECT -source 34.68.34.0/24 -p tcp -log warning # bc.googleusercontent.com
IN REJECT -source 34.82.205.0/24 -p tcp -log warning # bc.googleusercontent.com

PROXMOX : Firewall

Publié le par
Répondre

J’ai bloqué plusieurs pays :
– Iran : https://scanitex.com/en/resources/ip-ranges/ir
– Corée du Nord : https://scanitex.com/en/resources/ip-ranges/kp
– Vietnam : https://scanitex.com/en/resources/ip-ranges/vn
– Russie : https://scanitex.com/en/resources/ip-ranges/ru
– Pakistan : https://scanitex.com/en/resources/ip-ranges/pk
– Singapore : https://scanitex.com/en/resources/ip-ranges/sg
– Hong Kong : https://scanitex.com/en/resources/ip-ranges/hk
– Belarus : https://scanitex.com/en/resources/ip-ranges/by

Trop d’attaques … infernal.

# wc -l /etc/pve/firewall/cluster.fw
30725 /etc/pve/firewall/cluster.fw
# du -sh /etc/pve/firewall/cluster.fw
71K /etc/pve/firewall/cluster.fw

Le fichier cluser.fw est limité à 120 K.