Who the hell has a dishwasher connected to hot water? Shit, my washing machine doesn't even have hot water. Both devices have internal heaters. Both are over 10 years old.
This guy has been incorrect in his yt posts so many times, I simply do not believe him anymore.
He is all about monetization and doesn't care about truth or accuracy.
You can feed it an ip address to get an AS ("Autonomous System"), then ask it for all prefixes associated with that AS.
I fed it that first ip address from that list (43.131.0.0) and it showed my the same Tencent owned AS132203, and it gives back all the prefixes they have here:
I add re-actively. I figure there are "legitimate" IP's that companies use and I only look at IP addresses that are 'vandalizing' my servers with inappropriate scans and block them.
If I saw the two you have identified, then they would have been added. I do play a balance between "might be a game CDN" or a "legit server" and an outright VPS that is being used to abuse other servers.
But thanks, I will keep an eye on those two ranges.
FWIW, I looked through my list of ~8000 IP addresses, there isn't as many hits for these ranges as I would have thought. It's possible that they're more focused on using known DNS names than simply connecting to 80/443 on random IPs.
Edit: I also checked my Apache logs, I couldn't find any recent logs for "thinkbot".
jep, good tip! for ppl that do this be sure to make it case insensitive and only capture few distinct parts, not too specific. especially if u only expect browsers this can mitigate a lot.
u can also filter for allowing but this gives a risk of allowing the wrong thing as headers are easy to set, so its better to do it via blocking (sadly)
This guy has been incorrect in his yt posts so many times, I simply do not believe him anymore.
He is all about monetization and doesn't care about truth or accuracy.