Nice, you are a font of knowledge and information.
Someone really needs to come out with a service to track and block these guys. I'd pay good money for that.
OnThePike
2:32 pm on Oct 25, 2012 (gmt 0)
# Hetzner Online GmbH Hostile Network - AS24940 deny from 5.9.0.0/16 deny from 46.4.0.0/16 deny from 78.46.0.0/15 deny from 85.10.192.0/18 deny from 88.198.0.0/16 deny from 91.220.49.0/24 deny from 176.9.0.0/16 deny from 176.102.168.0/21 deny from 178.63.0.0/16 deny from 188.40.0.0/16 deny from 193.28.90.0/24 deny from 193.110.6.0/23 deny from 193.223.77.0/24 deny from 194.42.180.0/22 deny from 194.42.184.0/22 deny from 194.145.226.0/24 deny from 195.13.45.0/24 deny from 213.133.96.0/19 deny from 213.239.192.0/18
dstiles
8:13 pm on Oct 25, 2012 (gmt 0)
Thanks. Didn't have all of those.
ALSO: 41.204.192.0 - 41.204.223.255 - hetzner ZA
176.102.168.0/21 does not seem to be hetzner, possibly DSL.
91.220.49.0/24 - didn't have that one but 91.220.0.0/16 is a weasel range - lots of short, server-farm sub-ranges.
193.28.90.0/24 does not seem to be hetzner.
193.110.6.0/23 does not seem to be hetzner.
194.42.nnn can be combined in 194.42.176.0 - 194.42.191.255
195.13.45.0/24 does not seem to be hetzner nor servers.
expand to 213.133.96.0 - 213.133.127.255
With RIPE DNS checks, scroll down to end of results - sometimes shows a wider range. And check either side of apparent IP limits to ensure the range hasn't been split.
