ip 192.251.226.204

Alle Fragen, die rund um Fail2Ban (Konfiguration, Fehler, Filter...) sind.
Antworten
ktsaou
Beiträge: 18
Registriert: 12. Mai 2015, 08:41

ip 192.251.226.204

Beitrag von ktsaou » 3. Jun 2015, 21:18

Hi all,

I see that IP 192.251.226.204 is included in blocklist.de, but the search function does not find it.

I downloaded again 'http://lists.blocklist.de/lists/all.txt' and I found it in it.

Is it possible to block something you don't know anything about it?

This host is a web server distributing the tor exit points:

# host 192.251.226.204
204.226.251.192.in-addr.arpa is an alias for rev-204.blutmagie.de.
rev-204.blutmagie.de domain name pointer torstatus.blutmagie.de.

Regards,

Costa

Benutzeravatar
Martin
Beiträge: 400
Registriert: 14. Sep 2010, 11:54
Kontaktdaten:

Re: ip 192.251.226.204

Beitrag von Martin » 3. Jun 2015, 22:18

Hi,

the IP-Range from blutmagie.de was all blocked and not reported. We had some years ago a long discussion with the IP-Owner, that he doesnt take action.
Our compromise, with them all sites accepted, was we block/list the IP-Range and dont send Reports about attacks from there range.
This is the only one!
There was also some more IP-Range listen, but reported too. This are only small netranges.
Mfg Martin
http://www.blocklist.de/de/ Fail2Ban Reporting Service

ktsaou
Beiträge: 18
Registriert: 12. Mai 2015, 08:41

Re: ip 192.251.226.204

Beitrag von ktsaou » 6. Jun 2015, 00:37

Martin,

I don't know what problems you had with this guy in the past and I don't want to play it smart here. But a permanent block might be in violation of your rules.

As I understand it, you are listing all IPs that attacked one of your servers in the last 48 hours. If an IP did not attack anything recently, according to your rules it should not be listed. With such IPs in the list, you have a permanent false-positives.

Don't get me wrong. I am not suggesting you should unlist this IP. It is your list, do whatever you see proper.

As a user of the list though, I did not expect it. I considered it a bug. This is why i asked here.

Anyway, I thought you should know...

Keep up the good work.

Costa

Benutzeravatar
Martin
Beiträge: 400
Registriert: 14. Sep 2010, 11:54
Kontaktdaten:

Re: ip 192.251.226.204

Beitrag von Martin » 13. Jun 2015, 17:32

Hi,

The Problem is, when we unblock this IP-Range, we send him Reports again. So we got an dispute with them again.....

Yes, is not a Bug :-)
This was in this case the only solution for both sides.
Mfg Martin
http://www.blocklist.de/de/ Fail2Ban Reporting Service

Antworten