Web Security Authority . org

Important: The following are free for non commercial use.
This means you can download and use them as an end user only. Any commercial use of those rules is prohibited without the consent of the organization.

002-hijacked.conf
IP addresses that have been hijacked by spammers/hackers
(from the completewhois.com database).

SecFilterSelective REMOTE_ADDR 128\.13\.[0-9]{1,3}\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 131\.157\.[0-9]{1,3}\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 132\.220\.[0-9]{1,3}\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 132\.232\.[0-9]{1,3}\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 134\.33\.[0-9]{1,3}\.[0-9]{1,3}
# 134\.86\.[0-9]{1,3}\.[0-9]{1,3} - block ownership restored to successor - Mentor Graphics 
SecFilterSelective REMOTE_ADDR 138\.121\.[0-9]{1,3}\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 138\.252\.[0-9]{1,3}\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 139\.81\.[0-9]{1,3}\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 141\.196\.[0-9]{1,3}\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 142\.105\.[0-9]{1,3}\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 143\.49\.[0-9]{1,3}\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 146\.20\.[0-9]{1,3}\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 146\.100\.[0-9]{1,3}\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 147\.111\.[0-9]{1,3}\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 148\.3\.[0-9]{1,3}\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 150\.112\.[0-9]{1,3}\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 152\.147\.[0-9]{1,3}\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 155\.73\.[0-9]{1,3}\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 159\.2\.[0-9]{1,3}\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 160\.122\.[0-9]{1,3}\.[0-9]{1,3}
# 162\.141\.[0-9]{1,3}\.[0-9]{1,3} - block ownership restored to successor - Georgia Pacific
# 167\.212\.[0-9]{1,3}\.[0-9]{1,3} - delisted because its now announced by proper owner although whois is not fully fixed yet
SecFilterSelective REMOTE_ADDR 168\.245\.[0-9]{1,3}\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 170\.67\.[0-9]{1,3}\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 192\.67\.16\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 192\.83\.107\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 192\.150\.240\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 192\.153\.43\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 192\.189\.206\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 196\.4\.167\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 198\.133\.130\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 198\.135\.69\.[0-9]{1,3}
# 198\.175\.161\.[0-9]{1,3} - ip block ownership restored, delisted
SecFilterSelective REMOTE_ADDR 198\.175\.234\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 198\.178\.249\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 198\.182\.182\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 198\.186\.134\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 199\.60\.102\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 199\.79\.162\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 199\.120\.163\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 199\.120\.164\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 199\.120\.254\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 199\.201\.151\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 199\.201\.152\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 199\.245\.138\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 203\.4\.160\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 203\.15\.67\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 203\.19\.146\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 203\.26\.80\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 203\.27\.251\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 203\.29\.222\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 203\.30\.20\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 203\.32\.140\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 203\.33\.120\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 203\.33\.196\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 203\.34\.187\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 203\.55\.153\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 203\.62\.195\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 204\.52\.255\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 204\.62\.213\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 204\.154\.108\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 205\.159\.34\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 205\.159\.115\.[0-9]{1,3}
# 206\.197\.28\.[0-9]{1,3} - ip block ownership restored, delisted
# 206\.197\.29\.[0-9]{1,3} - ip block ownership restored, delisted
SecFilterSelective REMOTE_ADDR 206\.197\.30\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 206\.197\.49\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 206\.197\.99\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 206\.197\.134\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 206\.197\.175\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 206\.197\.176\.[0-9]{1,3}
SecFilterSelective REMOTE_ADDR 206\.197\.177\.[0-9]{1,3}
# 138\.105\.[0-9]{1,3}\.[0-9]{1,3} 
# 137\.171\.[0-9]{1,3}\.[0-9]{1,3}
# 157\.156\.[0-9]{1,3}\.[0-9]{1,3}
# 158\.181\.[0-9]{1,3}\.[0-9]{1,3}
# 166\.88\.[0-9]{1,3}\.[0-9]{1,3}
# 192\.107\.49\.[0-9]{1,3}
# 192\.160\.34\.[0-9]{1,3}
# 198\.133\.167\.[0-9]{1,3}
# 198\.185\.165\.[0-9]{1,3}
# 198\.185\.166\.[0-9]{1,3}
# 198\.190\.131\.[0-9]{1,3}
# 198\.190\.132\.[0-9]{1,3}
# 198\.199\.171\.[0-9]{1,3}
# 199\.26\.176\.[0-9]{1,3}
# 199\.74\.235\.[0-9]{1,3}
# 199\.248\.199\.[0-9]{1,3}
# 204\.19\.162\.[0-9]{1,3}
# 204\.87\.170\.[0-9]{1,3}
# 204\.225\.178\.[0-9]{1,3}
# 205\.159\.23\.[0-9]{1,3}
# 205\.159\.72\.[0-9]{1,3}

(c) 2005-2006 WebSecurityAuthority.org
ModSecurity and mod_security are trademarks of Thinking Stone Ltd (http://www.thinkingstone.com)
For more information or enquires please send us an email at info@WebSecurityAuthority.org