I
I
IPv42015-01-14 13:59:24
Computer networks
IPv4, 2015-01-14 13:59:24

How can you collect a database of "stray" IP addresses?

Essence of a question in the following:
There is a server on which it would be desirable to close access from addresses from which any muck comes. It doesn't matter what, even if it's just to "look". At the moment I block only TOR. Stupidly cron every hour I pull the file with their list of TOR servers and give 444 error.
I would also like to close the proxies of the kind socks4/5, and http (s) would not hurt.
In general, for now I imagine it as follows:

  1. Find a Chinese who will search the Internet for proxy distributions and send me a list, and I will block
  2. Buy private proxy lists and block them
  3. Search for proxies yourself and block them

In the first case, mostly "dead" proxies will come across. Thus, approximately 20-30 percent of the total list will remain valid. This is based on experience.
In the third case, it is similar, but also time-consuming.
In the second case, we will get valid proxies, but they are either password-protected or tied to your address. That is, it is unlikely that anyone else will sit with these proxies, but there is a chance. In general, it is expensive and the lists are small.
Do you have any of your own methods of collecting proxies for their subsequent ban?
Why not sit for days and not scan all the addresses of the world on a dedicated wheelbarrow in Pakistan and parse ready-made lists every day? Advise, anything, please.rqVBiVH.gif

Answer the question

In order to leave comments, you need to log in

4 answer(s)
V
Vladislav 21rpk, 2015-01-16
@IPv4

I think you are looking for them https://www.maxmind.com/ru/proxy https://www.maxmind.com/ru/geoip2-anonymous-ip-database

A
asd111, 2015-01-14
@asd111

Block via iptables by country, I don’t remember the name of the module, but it is there.
Usually about 50% of such traffic is from China, Pakistan, etc.
You can allow only the CIS, block the rest - it's even easier that way.

S
Sergey Petrikov, 2015-01-14
@RicoX

There is no way to detect all proxies. Either a white list of users, or highlight some other sign, or don't suffer from bullshit.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question