Tag: vpn

Ubuntu, VPN Gate, and Open VPN

Find the VPN at http://www.vpngate.net/en/. Filter by OpenVPN only. Look at the transfer rate. Might also see if the IP is responding.

https://www.kabatology.com/05/09/ubuntu-connect-to-vpn-gate-with-openvpn/ Download the OpenVPN file and open it. Cut out the sections between the tags, including the “begin” and “end” certificate. Create a separate directory for each gate. Save as “ca.crt”.

In Ubuntu Edit Connections > Network Connections > add > Open VPN > create. Fill in the form from top to bottom, or the form won’t work. Might want to add the domain name to the label. Choose “password”, vpn, vpn, add the location of the ca.crt file, Save, try.

mediaworksit.net: Research, Ban

free-109-108.mediaworksit.net has tried to crack my security so I thought it appropriate to track them down.

The host name only provides the third and fourth octet, leading one to gues the first two. As they have not repeated the third octet you will need to ban larger ranges.

Observation:
free-109-108.mediaworksit.net

Research:
free-112-5.mediaworksit.net 95.140.112.5 95.140.112.0 – 95.140.127.255 140.112.0/20
free-114-1.mediaworksit.net 95.140.114.0
free-124-110.mediaworksit.net 95.140.124.110
free-125-37.mediaworksit.net 95.140.125.37
free-125-62.mediaworksit.net 95.140.125.62

free-234-154.mediaworksit.net 109.111.234.154 109.111.234.0 – 109.111.237.255 109.111.234.0/22
free-235-194.mediaworksit.net 109.111.235.194

free-144-214.mediaworksit.net 178.254.144.214 178.254.128.0 – 178.254.191.255 178.254.128.0/18
free-148-194.mediaworksit.net 178.254.148.194
free-164-196.mediaworksit.net 178.254.164.196
free-167-14.mediaworksit.net 178.254.167.14
free-246-89.mediaworksit.net 178.253.246.89
free-249-30.mediaworksit.net 178.253.249.30

nullvpn.com: Research, Ban

hoor.nullvpn.com was trying to crack my security, so I thought it good to research and ban them. They are using a VPN, but there are not many IP addresses.

Observed:
hoor.nullvpn.com 128.199.170.45
paladin.nullvpn.com
kodi.nullvpn.com 128.199.103.2
hermod.nullvpn.com 188.166.188.219
cooper.nullvpn.com 128.199.127.59

Research:
Nullvpn.com 104.24.114.17

game.nullvpn.com 116.251.210.113

loki.nullvpn.com 128.199.80.0 128.199.0.0 – 128.199.255.255 DigitalOcean
necro.nullvpn.com 128.199.86.38
aegis.nullvpn.com 128.199.124.10
ra.nullvpn.com 128.199.176.180
tios.nullvpn.com 128.199.194.237
nyx.nullvpn.com 128.199.225.142
kodi.nullvpn.com 128.199.103.2

eros.nullvpn.com 139.59.234.213

free-02.nullvpn.com 149.202.60.72

poseidon.nullvpn.com 188.166.178.67 188.166.0.0 – 188.166.255.255 EU-DIGITALOCEAN
zeus.nullvpn.com 188.166.178.103
demeter.nullvpn.com 188.166.184.105
tyr.nullvpn.com 188.166.184.163
hermod.nullvpn.com 188.166.188.219
float.nullvpn.com 188.166.189.38
dev.nullvpn.com 188.166.190.144

ipredator.se: Research, Ban

ipredator.se is a Swedish VPN service that is comment spamming my site.

Observation:
anon-48-125.vpn.ipredator.se 46.246.32.0 – 46.246.63.255 PrivActually
host anon-44-42.vpn.ipredator.se 46.246.44.42
exit1.ipredator.se 197.231.221.211 CYBERDYNE Monrovia I did not realize that I had banned this before. If this changes I will hunt it down again. There are a few IPs that have used this host name. They continue to content scrape me.
anon-45-30.vpn.ipredator.se 46.246.45.30
anon-47-29.vpn.ipredator.se 46.246.47.29

Pattern:
Add 46.246. to the two octets in the host name.

Research
anon-39-1.vpn.ipredator.se 46.246.39.1
anon-42-1.vpn.ipredator.se 46.246.42.1
anon-37-1.vpn.ipredator.se 46.246.37.1
anon-55-1.vpn.ipredator.se 46.246.55.1
Anon-53-30.vpn.ipredator.se 46.246.53.30
anon-40-38.vpn.ipredator.se 46.246.40.38
anon-47-246.vpn.ipredator.se 46.246.47.246
anon-172-19.vpn.ipredator.se 93.182.172.19