Mary's been hacked

I checked out some of the hacker IPs listed on your web page. The San Diego Networker, Websense (208.80.193.XX), is my own, known malicious networking Administrator that I can't outsmart on a permanent basis. She recently moved to Scottsdale, AZ. I then looked up the "aggressive" Go Daddy.com in Bradenton, FL, (208.109.181.136) and it turns out that IP address is located in Scottsdale, AZ. Her name is Gail Y. Norton, attorney, 58. I'll look for Jdefender and research Joomla. Thanks to much for the info. M

NOT the administrator of my own computer

208.80.193.40 is evil. I would appreciate hearing from anyone with advice on how to report my hacker. I'm not very sophisticated, comparatively speaking, about all of this, and I can't seem to get rid of her. (Whine.)

!?0A81> 02B>@C ?>41>@:8 MB8E IP Address.

Thank to the author of a selection these IP Address. I shall have in view of and necessarily I shall bring in these IP Address in the black list.

watch also this bull shit!!!

195.2.253.80

ThankYou All.

God bless you all and God bless iptables !

Developer of DigOurGame

Greetings, 
First of thank you for posting this information. It will help me block a few IPs I missed. Here is a good one to add as well. I was getting hammered by CHINANET Guangdong province networks 119.128.0.0 - 119.143.255.255. Right after I sent an email to ipadm@gddc.com.cn the host master our email address started to be used by them as a fake sender of spam like so " Return-Path:  
Received: from 6EFDC3EA4DA9441 ([119.139.186.130])" I reported this to the federal trade commission so lets see what happens.  
 
Thanks again, 
Rodney Miller PCA 
DigOurGame 
http://dog.servegame.org 
digourgame@gmail.com

Hacker IP

Here's my list of hacker IP. Groups of IP consistently worked together to either restart or stop my web service, most likely attempting to gain control of web admin or OS. A few of them are requesting PHP alter or setup. Websense is a company that is supposed to protect systems but they consistently show up with the the bad guys. China, UK and the GoDaddy Florida were the most aggressive. 
 
124.115.1.7 - - [27/Oct/2009:13:52:52 -1000] "GET / HTTP/1.1" 200 2807 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" GET / - "HTTP/1.1"  
 
 
 
114.80.93.71 Shanghai China 
114.80.93.73 Shanghai China 
123.125.68.13 CNCGROUP Beijing Province Network Beijing China 
123.125.68.6 CNCGROUP Beijing Province Network Beijing China 
123.125.69.11 CNCGROUP Beijing Province Network Beijing China 
123.125.69.12 CNCGROUP Beijing Province Network Beijing China 
123.125.69.5 CNCGROUP Beijing Province Network Beijing China 
123.125.69.7 CNCGROUP Beijing Province Network Beijing China 
124.115.0.145 CHINANET Shanxi(SN) province network Beijing China 
124.115.1.7 CHINANET Shanxi(SN) province network Beijing China 
124.115.1.8 CHINANET Shanxi(SN) province network Beijing China 
124.115.4.215 CHINANET Shanxi(SN) province network Beijing China 
124.115.6.15 CHINANET Shanxi(SN) province network Beijing China 
128.214.114.17 Helsinki Finland 
174.37.205.71 SoftLayer Technologies Dallas TX 
190.146.244.155 Telmex Colombia S.A. Bogota Colombia 
190.160.254.206 Temuko Chile 
200.58.147.131 Telefonica Moviles del Uruguay SA Montevideo Uruguay 
208.109.181.136 GoDaddy.com Bradenton FL 
208.80.193.28 Websense - Suspected network sharing device San Diego California 
208.80.193.28 Websense San Diego CA 
208.80.193.29 Websense San Diego CA 
208.80.193.30 Websense San Diego CA 
208.80.193.31 Websense San Diego CA 
208.80.193.32 Websense San Diego CA 
208.80.193.34 Websense - Suspected network sharing device San Diego CA 
208.80.193.37 Websense San Diego CA 
208.80.193.40 Websense - Suspected network sharing device San Diego CA 
208.80.193.41 Websense San Diego CA 
208.80.193.42 Websense San Diego CA 
208.80.193.57 Websense San Diego CA 
208.80.193.61 Websense San Diego CA 
212.48.115.189 Artfiles New Media GmbH Hamburg Germany 
222.92.124.66 CHINANET jiangsu province network Beijing China 
38.100.41.113 Performance Systems International Washington DC 
38.100.41.66 Performance Systems International Washington DC 
38.105.83.12 Performance Systems International Washington DC 
58.61.164.139 ChinaNet Guangdong Province Network Shenzhen China 
58.61.164.140 ChinaNet Guangdong Province Network Shenzhen China 
58.61.164.141 ChinaNet Guangdong Province Network Shenzhen China 
58.61.164.39 ChinaNet Guangdong Province Network Shenzhen China 
58.61.164.40 ChinaNet Guangdong Province Network Shenzhen China 
64.15.159.169 iWeb Technologies Montreal Canada 
67.213.214.216 Hosting Services Norwalk CA 
69.10.136.56 RackForce Hosting Kelowna Canada 
69.14.14.79 WideOpenWest Mt Clemens MI 
72.15.222.205 Peak 10 Charlotte NC 
74.143.58.94 Insight Communications Company Louiseville KY 
74.52.245.146 THEPLANET.COM INTERNET SERVICES Houston TX 
81.169.154.94 Strato Rechenzentrum Berlin Germany 
85.17.169.18 Prinsinbeek Netherlands 
85.92.222.254 Bis London UK 
86.58.156.45 jay.net a/s Glostrup Denmark 
89.187.101.71 Equinix Limited London UK 
89.201.166.98 OT - Optima Telekom d.o.o. Zagreb Croatia 
93.127.253.10 I.C.S. Trabia-Network S.R.L Germany 
97.74.144.45 GoDaddy.com Scottsdale AZ 
99.198.118.186 SingleHop Chicago IL

watch out for this one

114.74.251.254

watch out for this one

24.19.113.12 
 
 
98.203.185.67

you are right

I composed this list from attacks i had in my previous hosting company. 
after switching to a different hosting provider the attacks went down to almost nothing. that is why i haven't updated the list too much recently.

You're missing a great "dot com" oppo

A site that allowed people to post IPs associated with attempted break-ins would be popular enough to attract the support of advertises. But you would have have some kind of search engine and various services like telling people the geographic location of the address, if known.  
 
It should be kept in mind that people whose use ISPs may get assigned random IP addresses and a person's computer may be running a "bot" installed by a virus that does malicious cracking without the person knowing it. I think many people would be interested in looking up their own IP addresses to see if their computers were being taken over in this way. For the same reason, I think it is important to associate a time stamp with the hacking done from an IP since it may be assigned to different users at different times.

You're missing a great "dot com" oppo

61.38.198.67 is comfirmed by me to. 
Tried both sql inj. and upload webshell.

You're missing a great "dot com" oppo

could you split the IPS with commas; no rush.

I know this ip

72.29.67.38 
 
I know him himself the owner of this ip hes a hacker and is atm on my forums 
 
Im thinking i should maybe ban his ip

nice man

thanks for adding this

Tracked Down

And for you last guy: 
----------------------------- 
 
IP address 195.35.219.11 
Hostname wc-11.r-195-35-219.atwork.nl 
ISP Koninklijke Boom Uitgevers 
Country Netherlands Netherlands 
 
How to handle an abusive or fraud mail 
If you are tracking an abusive or fraud mail here is a possible list of email addresses to complain to. 
 
* peering@castel.nl 
* abuse@castel.nl 
* postmaster@castel.nl 
* helpdesk@castel.nl 
* info@castel.nl

Who They Are

I decided to track down a random few. 
 
Here are the results: 
 
IP address 196.1.176.195 
Hostname Not available 
ISP ORG-NTL1-AFRINIC, Provider Local Registry 
Country Nigeria Nigeria 
 
 
IP address 207.44.154.126 
Hostname mail.bilgeonline.com 
ISP ThePlanet.com Internet Services, Inc. 
Country United States United States 
 
 
IP address 209.85.52.146 
Hostname dedicado1.servidoresquantum.net 
ISP ThePlanet.com Internet Services, Inc. 
Country United States United States 
 
 
IP address 206.221.184.180 
Hostname 206-221-184-180.fndns.net 
ISP Coporate Summaries 
Country United States United States 
 
 
IP address 222.73.5.138 
Hostname Not available 
ISP  
Country China China 
 
 
They can be found :p 
 
Link To Tracking Site: Here 
 
E-mail me at 
 
4ree9lix7@gmail.com (Removing the 4, 9 and 7)

posted in joomla components

you can find the link

Thank You

Yes i use Joomla for my website and i am looking forward to your module. Thank you for your interest!

the compunent is Jdefender

you can use it only if you use Joomla for your website. i will review it here in a few days.

Nice One

That is great. You cath your hackers. But how can i do for my website. I don't even know whether there is an hacking attempt or not? Would you please share your security module? How can i install it to my web site? Thank you

Hacker IP

I agree: This address tried the same with my Website: 
 
195.35.219.11