Kyivstar.net – How to Block this Dangerous Network from Ukraine via .htaccess

We had to block the whole range of IPs of this dangerous network from Ukraine, using .htaccess. We were gettings hundreds of spam and hack attempts from them daily.

While it is not very practical to block each and every IP using .htaccess, we think Kyivstar.net should be totally blocked because the hacking attempts from their IPs were rather strong.

While they provide Mobile communications, it smells like a botnet hosting farm. Hard to believe all those attacks are coming from mobile phones.

https://ipinfo.io/AS15895

Here is what to add (or merge the “deny” only IPs) in your .htaccess to block them. Be sure you know what you are doing when editing your .htaccess file.

<Limit GET POST>
order allow,deny
# Kyivstar PJSC
deny from 109.162.0.0/17
deny from 134.249.0.0/16
deny from 176.8.0.0/16
deny from 178.137.0.0/16
deny from 188.163.0.0/17
deny from 193.41.60.0/22
deny from 37.115.0.0/16
deny from 37.229.0.0/16
deny from 46.118.0.0/15
deny from 46.185.0.0/17
deny from 46.211.0.0/16
deny from 5.248.0.0/16
deny from 81.23.16.0/20
deny from 94.153.0.0/16
deny from 2a02:2378::/32
# Kyivstar PJSC
allow from all
</Limit>

If you are using WordPress script, you can skip the .htaccess block and install The Shield plugin, that takes care most of the attacks and much more. With some tuning you can get rid of the spam and also block the web attacks using The Shield firewall option.


You can also discuss this topic in our Forums.

3 thoughts on “Kyivstar.net – How to Block this Dangerous Network from Ukraine via .htaccess”

  1. just me says:

    37.115.184.193
    37.115.189.148
    37.115.191.132
    46.118.155.222
    46.118.157.179
    46.119.112.31
    134.249.55.120
    148.70.80.160
    176.8.89.33
    176.8.91.216
    178.137.83.216
    178.137.84.233
    178.137.87.154

  2. Twice says:

    Is that all ? No more Ips ? Are you sure ?

    1. Alessandro Cagliostro says:

      Yeap, i think so. If something has escaped, we will update here.

Leave a Reply

Your email address will not be published. Required fields are marked *