├── README.md ├── block.sh ├── ips.json └── ips.txt /README.md: -------------------------------------------------------------------------------- 1 | An extremely basic distribution method for the Minecraft "server scanning" IP addresses that have been discovered by PebbleHost's honeypot infrastructure. 2 | -------------------------------------------------------------------------------- /block.sh: -------------------------------------------------------------------------------- 1 | # A very very basic script that was thown together in 15 minutes to apply this IP blocklist to the DOCKER-USER chain. 2 | # If you don't run docker, swap out all occurrences of DOCKER-USER for INPUT and this will block the connections on the host machine instead. 3 | # Combine with a cron every few hours, it'll automatically add and remove IPs based on this list. 4 | 5 | if [[ `/usr/sbin/ipset list | grep "blacklist"` == "" ]]; then 6 | /usr/sbin/ipset create blacklist hash:ip 7 | fi 8 | if [[ `/usr/sbin/iptables -w 2 -n -L DOCKER-USER | grep "blacklist"` == "" ]]; then 9 | /usr/sbin/iptables -I DOCKER-USER -m set --match-set blacklist src -j DROP 10 | fi 11 | 12 | blocked_ips=`curl -s "https://raw.githubusercontent.com/pebblehost/hunter/master/ips.txt"` 13 | # Adjust the ipset with the IPs 14 | ipsetrules=`/usr/sbin/ipset list blacklist | grep -E '[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}'` 15 | for ip in $blocked_ips; do 16 | if [[ `echo "$ipsetrules" | grep "$ip"` == "" ]]; then 17 | echo "Applying block to $ip" 18 | /usr/sbin/ipset add blacklist $ip/32 19 | fi 20 | done 21 | 22 | for ip in $ipsetrules; do 23 | if [[ `echo "$blocked_ips" | grep "$ip"` == "" ]]; then 24 | echo "Removing block from $ip" 25 | /usr/sbin/ipset del blacklist $ip 26 | fi 27 | done 28 | unset IFS 29 | 30 | # THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR 31 | # IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 32 | # FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE 33 | # AUTHORS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN 34 | # ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION 35 | # WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. 36 | -------------------------------------------------------------------------------- /ips.json: -------------------------------------------------------------------------------- 1 | ["23.234.69.28","23.234.86.28","23.234.86.153","23.234.91.155","23.234.101.29","34.23.44.23","34.73.180.107","37.120.237.116","38.240.225.39","38.240.225.49","45.83.220.186","45.83.220.209","45.95.147.247","45.133.182.213","45.133.182.244","45.134.142.208","45.134.213.209","45.135.194.16","46.19.140.204","46.19.140.215","46.19.140.218","51.15.34.47","51.158.160.67","62.93.167.135","62.93.167.165","68.235.46.70","68.235.46.101","76.130.81.82","79.127.182.165","81.17.16.76","81.17.16.84","81.17.16.90","82.102.19.76","82.102.19.90","85.234.52.128","87.249.134.16","89.37.63.21","89.37.63.77","89.37.63.202","91.90.44.21","91.90.44.22","91.90.44.23","91.90.123.6","91.207.57.140","91.207.57.151","91.207.57.154","95.111.227.12","98.98.47.145","103.214.20.52","103.216.220.36","104.28.160.231","104.28.203.246","104.28.235.246","104.193.135.103","104.193.135.141","104.193.135.152","104.193.135.154","104.193.135.184","104.193.135.186","104.193.135.209","138.199.6.222","138.199.6.235","138.199.15.149","141.98.252.143","141.98.252.148","141.98.252.158","141.98.252.173","141.98.252.177","141.98.252.178","141.98.254.141","141.98.254.157","141.98.254.173","141.98.254.189","141.98.255.143","141.98.255.144","141.98.255.145","141.98.255.146","141.98.255.147","141.98.255.148","141.98.255.149","141.98.255.150","141.98.255.151","141.98.255.152","146.70.22.200","146.70.74.108","146.70.74.116","146.70.74.119","146.70.74.122","146.70.117.76","146.70.117.84","146.70.117.90","146.70.117.108","146.70.117.119","146.70.119.6","146.70.119.108","146.70.119.116","146.70.119.151","146.70.119.154","146.70.126.198","146.70.128.170","146.70.128.180","146.70.128.183","146.70.128.184","146.70.128.186","146.70.128.198","146.70.132.12","146.70.132.44","146.70.132.84","146.70.132.87","146.70.134.38","146.70.134.140","146.70.134.148","146.70.134.151","146.70.134.172","146.70.134.180","146.70.144.84","146.70.144.87","146.70.144.88","146.70.144.90","146.70.144.106","146.70.144.108","146.70.144.116","146.70.144.119","146.70.144.120","146.70.144.122","146.70.166.136","146.70.168.21","146.70.168.52","146.70.177.85","146.70.183.116","146.70.184.149","146.70.184.180","146.70.184.213","146.70.184.240","146.70.184.244","146.70.185.149","146.70.188.136","146.70.189.149","146.70.189.180","146.70.189.213","146.70.189.244","146.70.196.21","146.70.196.52","146.70.196.85","146.70.196.116","146.70.197.21","146.70.197.46","146.70.197.52","146.70.197.85","146.70.197.104","146.70.197.116","146.70.198.72","146.70.198.200","146.70.199.136","146.70.199.200","146.70.201.72","146.70.211.8","146.70.225.174","146.70.225.180","146.70.225.213","146.70.225.232","146.70.225.238","146.70.225.244","149.40.50.100","149.88.20.195","149.88.20.208","149.102.246.17","155.248.209.22","156.146.63.209","162.128.129.113","169.150.201.4","169.150.201.30","170.62.100.139","173.212.248.30","176.65.138.169","176.65.148.136","176.65.149.6","176.65.149.246","176.125.235.101","178.218.144.42","178.249.214.4","178.249.214.9","178.249.214.214","178.249.214.215","179.43.189.70","185.65.134.134","185.65.134.139","185.65.134.140","185.65.134.141","185.65.134.151","185.65.134.153","185.65.134.163","185.65.134.164","185.65.134.171","185.65.134.177","185.65.134.183","185.65.134.189","185.65.134.221","185.65.135.135","185.65.135.160","185.65.135.161","185.77.218.3","185.92.210.229","185.93.69.133","185.156.46.180","185.156.46.193","185.165.44.168","185.188.61.199","185.195.232.162","185.195.232.251","185.195.233.143","185.195.233.207","185.204.1.182","185.204.1.183","185.204.1.184","185.204.1.185","185.204.1.186","185.204.1.212","185.204.1.220","185.212.149.204","185.212.149.206","185.213.154.148","185.213.154.149","185.213.154.150","185.213.154.205","185.213.155.136","185.213.155.137","185.213.155.143","185.213.155.153","185.213.155.163","185.213.155.167","185.213.155.173","185.213.155.177","185.213.155.178","185.213.155.229","185.248.85.35","185.253.170.8","185.254.75.23","188.217.48.104","188.241.176.200","191.101.31.23","191.101.31.45","193.19.207.229","193.32.126.137","193.32.126.138","193.32.126.144","193.32.126.149","193.32.126.152","193.32.126.162","193.32.127.138","193.32.127.142","193.32.127.154","193.32.127.156","193.32.127.158","193.32.127.159","193.32.248.143","193.32.248.195","193.32.248.211","193.32.248.217","193.32.249.132","193.32.249.162","193.32.249.168","193.138.7.140","193.138.7.180","193.138.7.224","193.138.7.233","193.138.7.243","193.138.218.161","193.138.218.162","193.138.218.222","194.127.199.6","194.127.199.35","194.127.199.124","194.127.199.139","194.127.199.155","194.127.199.168","194.127.199.170","195.154.199.60","198.44.128.122","198.44.129.172","198.44.140.176","198.54.131.84","198.54.132.58","198.54.132.76","198.54.132.87","198.54.132.90","198.54.133.77","198.54.134.90","198.54.135.218","208.131.130.18","212.15.56.19"] -------------------------------------------------------------------------------- /ips.txt: -------------------------------------------------------------------------------- 1 | 23.234.69.28 2 | 23.234.86.28 3 | 23.234.86.153 4 | 23.234.91.155 5 | 23.234.101.29 6 | 34.23.44.23 7 | 34.73.180.107 8 | 37.120.237.116 9 | 38.240.225.39 10 | 38.240.225.49 11 | 45.83.220.186 12 | 45.83.220.209 13 | 45.95.147.247 14 | 45.133.182.213 15 | 45.133.182.244 16 | 45.134.142.208 17 | 45.134.213.209 18 | 45.135.194.16 19 | 46.19.140.204 20 | 46.19.140.215 21 | 46.19.140.218 22 | 51.15.34.47 23 | 51.158.160.67 24 | 62.93.167.135 25 | 62.93.167.165 26 | 68.235.46.70 27 | 68.235.46.101 28 | 76.130.81.82 29 | 79.127.182.165 30 | 81.17.16.76 31 | 81.17.16.84 32 | 81.17.16.90 33 | 82.102.19.76 34 | 82.102.19.90 35 | 85.234.52.128 36 | 87.249.134.16 37 | 89.37.63.21 38 | 89.37.63.77 39 | 89.37.63.202 40 | 91.90.44.21 41 | 91.90.44.22 42 | 91.90.44.23 43 | 91.90.123.6 44 | 91.207.57.140 45 | 91.207.57.151 46 | 91.207.57.154 47 | 95.111.227.12 48 | 98.98.47.145 49 | 103.214.20.52 50 | 103.216.220.36 51 | 104.28.160.231 52 | 104.28.203.246 53 | 104.28.235.246 54 | 104.193.135.103 55 | 104.193.135.141 56 | 104.193.135.152 57 | 104.193.135.154 58 | 104.193.135.184 59 | 104.193.135.186 60 | 104.193.135.209 61 | 138.199.6.222 62 | 138.199.6.235 63 | 138.199.15.149 64 | 141.98.252.143 65 | 141.98.252.148 66 | 141.98.252.158 67 | 141.98.252.173 68 | 141.98.252.177 69 | 141.98.252.178 70 | 141.98.254.141 71 | 141.98.254.157 72 | 141.98.254.173 73 | 141.98.254.189 74 | 141.98.255.143 75 | 141.98.255.144 76 | 141.98.255.145 77 | 141.98.255.146 78 | 141.98.255.147 79 | 141.98.255.148 80 | 141.98.255.149 81 | 141.98.255.150 82 | 141.98.255.151 83 | 141.98.255.152 84 | 146.70.22.200 85 | 146.70.74.108 86 | 146.70.74.116 87 | 146.70.74.119 88 | 146.70.74.122 89 | 146.70.117.76 90 | 146.70.117.84 91 | 146.70.117.90 92 | 146.70.117.108 93 | 146.70.117.119 94 | 146.70.119.6 95 | 146.70.119.108 96 | 146.70.119.116 97 | 146.70.119.151 98 | 146.70.119.154 99 | 146.70.126.198 100 | 146.70.128.170 101 | 146.70.128.180 102 | 146.70.128.183 103 | 146.70.128.184 104 | 146.70.128.186 105 | 146.70.128.198 106 | 146.70.132.12 107 | 146.70.132.44 108 | 146.70.132.84 109 | 146.70.132.87 110 | 146.70.134.38 111 | 146.70.134.140 112 | 146.70.134.148 113 | 146.70.134.151 114 | 146.70.134.172 115 | 146.70.134.180 116 | 146.70.144.84 117 | 146.70.144.87 118 | 146.70.144.88 119 | 146.70.144.90 120 | 146.70.144.106 121 | 146.70.144.108 122 | 146.70.144.116 123 | 146.70.144.119 124 | 146.70.144.120 125 | 146.70.144.122 126 | 146.70.166.136 127 | 146.70.168.21 128 | 146.70.168.52 129 | 146.70.177.85 130 | 146.70.183.116 131 | 146.70.184.149 132 | 146.70.184.180 133 | 146.70.184.213 134 | 146.70.184.240 135 | 146.70.184.244 136 | 146.70.185.149 137 | 146.70.188.136 138 | 146.70.189.149 139 | 146.70.189.180 140 | 146.70.189.213 141 | 146.70.189.244 142 | 146.70.196.21 143 | 146.70.196.52 144 | 146.70.196.85 145 | 146.70.196.116 146 | 146.70.197.21 147 | 146.70.197.46 148 | 146.70.197.52 149 | 146.70.197.85 150 | 146.70.197.104 151 | 146.70.197.116 152 | 146.70.198.72 153 | 146.70.198.200 154 | 146.70.199.136 155 | 146.70.199.200 156 | 146.70.201.72 157 | 146.70.211.8 158 | 146.70.225.174 159 | 146.70.225.180 160 | 146.70.225.213 161 | 146.70.225.232 162 | 146.70.225.238 163 | 146.70.225.244 164 | 149.40.50.100 165 | 149.88.20.195 166 | 149.88.20.208 167 | 149.102.246.17 168 | 155.248.209.22 169 | 156.146.63.209 170 | 162.128.129.113 171 | 169.150.201.4 172 | 169.150.201.30 173 | 170.62.100.139 174 | 173.212.248.30 175 | 176.65.138.169 176 | 176.65.148.136 177 | 176.65.149.6 178 | 176.65.149.246 179 | 176.125.235.101 180 | 178.218.144.42 181 | 178.249.214.4 182 | 178.249.214.9 183 | 178.249.214.214 184 | 178.249.214.215 185 | 179.43.189.70 186 | 185.65.134.134 187 | 185.65.134.139 188 | 185.65.134.140 189 | 185.65.134.141 190 | 185.65.134.151 191 | 185.65.134.153 192 | 185.65.134.163 193 | 185.65.134.164 194 | 185.65.134.171 195 | 185.65.134.177 196 | 185.65.134.183 197 | 185.65.134.189 198 | 185.65.134.221 199 | 185.65.135.135 200 | 185.65.135.160 201 | 185.65.135.161 202 | 185.77.218.3 203 | 185.92.210.229 204 | 185.93.69.133 205 | 185.156.46.180 206 | 185.156.46.193 207 | 185.165.44.168 208 | 185.188.61.199 209 | 185.195.232.162 210 | 185.195.232.251 211 | 185.195.233.143 212 | 185.195.233.207 213 | 185.204.1.182 214 | 185.204.1.183 215 | 185.204.1.184 216 | 185.204.1.185 217 | 185.204.1.186 218 | 185.204.1.212 219 | 185.204.1.220 220 | 185.212.149.204 221 | 185.212.149.206 222 | 185.213.154.148 223 | 185.213.154.149 224 | 185.213.154.150 225 | 185.213.154.205 226 | 185.213.155.136 227 | 185.213.155.137 228 | 185.213.155.143 229 | 185.213.155.153 230 | 185.213.155.163 231 | 185.213.155.167 232 | 185.213.155.173 233 | 185.213.155.177 234 | 185.213.155.178 235 | 185.213.155.229 236 | 185.248.85.35 237 | 185.253.170.8 238 | 185.254.75.23 239 | 188.217.48.104 240 | 188.241.176.200 241 | 191.101.31.23 242 | 191.101.31.45 243 | 193.19.207.229 244 | 193.32.126.137 245 | 193.32.126.138 246 | 193.32.126.144 247 | 193.32.126.149 248 | 193.32.126.152 249 | 193.32.126.162 250 | 193.32.127.138 251 | 193.32.127.142 252 | 193.32.127.154 253 | 193.32.127.156 254 | 193.32.127.158 255 | 193.32.127.159 256 | 193.32.248.143 257 | 193.32.248.195 258 | 193.32.248.211 259 | 193.32.248.217 260 | 193.32.249.132 261 | 193.32.249.162 262 | 193.32.249.168 263 | 193.138.7.140 264 | 193.138.7.180 265 | 193.138.7.224 266 | 193.138.7.233 267 | 193.138.7.243 268 | 193.138.218.161 269 | 193.138.218.162 270 | 193.138.218.222 271 | 194.127.199.6 272 | 194.127.199.35 273 | 194.127.199.124 274 | 194.127.199.139 275 | 194.127.199.155 276 | 194.127.199.168 277 | 194.127.199.170 278 | 195.154.199.60 279 | 198.44.128.122 280 | 198.44.129.172 281 | 198.44.140.176 282 | 198.54.131.84 283 | 198.54.132.58 284 | 198.54.132.76 285 | 198.54.132.87 286 | 198.54.132.90 287 | 198.54.133.77 288 | 198.54.134.90 289 | 198.54.135.218 290 | 208.131.130.18 291 | 212.15.56.19 292 | --------------------------------------------------------------------------------