Kyivstar.net – How to Block this Dangerous Network from Ukraine via .htaccess
We had to block the whole range of IPs of this dangerous network from Ukraine, using .htaccess. We were gettings hundreds of spam and hack attempts from them daily.
While it is not very practical to block each and every IP using .htaccess, we think Kyivstar.net should be totally blocked because the hacking attempts from their IPs were rather strong.
While they provide Mobile communications, it smells like a botnet hosting farm. Hard to believe all those attacks are coming from mobile phones.
Here is what to add (or merge the “deny” only IPs) in your .htaccess to block them. Be sure you know what you are doing when editing your .htaccess file.
<Limit GET POST>
# Kyivstar PJSC
deny from 220.127.116.11/17
deny from 18.104.22.168/16
deny from 22.214.171.124/16
deny from 126.96.36.199/16
deny from 188.8.131.52/17
deny from 184.108.40.206/22
deny from 220.127.116.11/16
deny from 18.104.22.168/16
deny from 22.214.171.124/15
deny from 126.96.36.199/17
deny from 188.8.131.52/16
deny from 184.108.40.206/16
deny from 220.127.116.11/20
deny from 18.104.22.168/16
deny from 2a02:2378::/32
# Kyivstar PJSC
allow from all
If you are using WordPress script, you can skip the .htaccess block and install The Shield plugin, that takes care most of the attacks and much more. With some tuning you can get rid of the spam and also block the web attacks using The Shield firewall option.
- Poneytelecom.eu – How to Block this Dangerous French Network via .htaccess
- Hetzner GmbH: Hosting Botnets, Scrappers, Spammers and Hacking Scripts
- OVH.com SAS: Hosting Botnets, Scrappers, Spammers and Hacking Scripts
- Poneytelecom.eu / Online SAS: Hosting Botnets, Scrappers, Spammers and Hacking Scripts
- Leaseweb.com: Hosting Spammers and Hacking Scripts