openheimer icon indicating copy to clipboard operation
openheimer copied to clipboard

IP range exclusion

Open ghost opened this issue 2 years ago • 1 comments

The following IP ranges are generally not going to host a minecraft server with the exception of overlay networks using a private range, and should be ignored by default.

Scanning literally everything is a great way to get blackholed off the internet.

# http://www.iana.org/assignments/iana-ipv4-special-registry/iana-ipv4-special-registry.xhtml
# http://tools.ietf.org/html/rfc5735
# "This" network
0.0.0.0/8
# Private networks
10.0.0.0/8
# Carrier-grade NAT - RFC 6598
100.64.0.0/10
# Host loopback
127.0.0.0/8
# Link local
169.254.0.0/16
# Private networks
172.16.0.0/12
# IETF Protocol Assignments
192.0.0.0/24
# DS-Lite
192.0.0.0/29
# NAT64
192.0.0.170/32
# DNS64
192.0.0.171/32
# Documentation (TEST-NET-1)
192.0.2.0/24
# 6to4 Relay Anycast
192.88.99.0/24
# Private networks
192.168.0.0/16
# Benchmarking
198.18.0.0/15
# Documentation (TEST-NET-2)
198.51.100.0/24
# Documentation (TEST-NET-3)
203.0.113.0/24
# Reserved
240.0.0.0/4
# Limited Broadcast
255.255.255.255/32

ghost avatar Apr 23 '23 10:04 ghost

Additional: Masscan's ignored addresses would also prove useful, since there are plenty of hosts that are abuse report happy for doing this sort of thing.

https://github.com/robertdavidgraham/masscan/blob/master/data/exclude.conf

SleepingCrows avatar Apr 23 '23 15:04 SleepingCrows