Major bot networks exposed

[Graybeard]

When setting up a new server and checking logs cleaning up the security. I discovered what it looks like a major VPN and bot network.
Pretty outrageous

deny 5.180.151.0/24; # 2025-05-10 US AS40021 NL-811-40021
deny 5.252.52.0/22; # 2025-05-10 US AS40021 NL-811-40021
deny 31.220.96.0/21; # 2025-05-10 US AS40021 NL-811-40021
deny 38.105.209.0/24; # 2025-05-10 US AS40021 NL-811-40021
deny 38.105.232.0/24; # 2025-05-10 US AS40021 NL-811-40021
deny 45.137.192.0/24; # 2025-05-10 US AS40021 NL-811-40021
deny 45.137.194.0/24; # 2025-05-10 US AS40021 NL-811-40021
deny 62.146.168.0/21; # 2025-05-10 US AS40021 NL-811-40021
deny 62.146.176.0/21; # 2025-05-10 US AS40021 NL-811-40021
deny 62.146.224.0/21; # 2025-05-10 US AS40021 NL-811-40021
deny 66.94.96.0/19; # 2025-05-10 US AS40021 NL-811-40021
deny 81.22.38.0/24; # 2025-05-10 US AS40021 NL-811-40021
deny 82.197.64.0/22; # 2025-05-10 US AS40021 NL-811-40021
deny 85.239.230.0/23; # 2025-05-10 US AS40021 NL-811-40021
deny 85.239.232.0/21; # 2025-05-10 US AS40021 NL-811-40021
deny 85.239.240.0/21; # 2025-05-10 US AS40021 NL-811-40021
deny 85.239.248.0/23; # 2025-05-10 US AS40021 NL-811-40021
deny 85.239.250.0/24; # 2025-05-10 US AS40021 NL-811-40021
deny 86.48.16.0/20; # 2025-05-10 US AS40021 NL-811-40021
deny 89.117.16.0/21; # 2025-05-10 US AS40021 NL-811-40021
deny 89.117.72.0/21; # 2025-05-10 US AS40021 NL-811-40021
deny 89.117.144.0/21; # 2025-05-10 US AS40021 NL-811-40021
deny 92.118.56.0/22; # 2025-05-10 US AS40021 NL-811-40021
deny 94.72.112.0/20; # 2025-05-10 US AS40021 NL-811-40021
deny 94.101.113.0/24; # 2025-05-10 US AS40021 NL-811-40021
deny 109.236.60.0/24; # 2025-05-10 US AS40021 NL-811-40021
deny 144.126.128.0/19; # 2025-05-10 US AS40021 NL-811-40021
deny 147.93.0.0/21; # 2025-05-10 US AS40021 NL-811-40021
deny 147.93.128.0/20; # 2025-05-10 US AS40021 NL-811-40021
deny 147.93.144.0/22; # 2025-05-10 US AS40021 NL-811-40021
deny 147.93.150.0/24; # 2025-05-10 US AS40021 NL-811-40021
deny 154.12.224.0/19; # 2025-05-10 US AS40021 NL-811-40021
deny 154.38.160.0/19; # 2025-05-10 US AS40021 NL-811-40021
deny 154.53.32.0/19; # 2025-05-10 US AS40021 NL-811-40021
deny 157.173.192.0/20; # 2025-05-10 US AS40021 NL-811-40021
deny 176.57.165.0/24; # 2025-05-10 US AS40021 NL-811-40021
deny 185.111.156.0/24; # 2025-05-10 US AS40021 NL-811-40021
deny 185.187.235.0/24; # 2025-05-10 US AS40021 NL-811-40021
deny 194.113.67.0/24; # 2025-05-10 US AS40021 NL-811-40021
deny 194.140.196.0/22; # 2025-05-10 US AS40021 NL-811-40021
deny 194.238.24.0/21; # 2025-05-10 US AS40021 NL-811-40021
deny 195.26.240.0/20; # 2025-05-10 US AS40021 NL-811-40021
deny 207.244.224.0/19; # 2025-05-10 US AS40021 NL-811-40021
deny 209.126.0.0/20; # 2025-05-10 US AS40021 NL-811-40021
deny 209.126.70.0/24; # 2025-05-10 US AS40021 NL-811-40021
deny 209.126.77.0/24; # 2025-05-10 US AS40021 NL-811-40021
deny 209.126.79.0/24; # 2025-05-10 US AS40021 NL-811-40021
deny 209.126.80.0/21; # 2025-05-10 US AS40021 NL-811-40021
deny 209.145.48.0/20; # 2025-05-10 US AS40021 NL-811-40021
deny 212.28.176.0/20; # 2025-05-10 IT AS40021 NL-811-40021
deny 212.56.32.0/20; # 2025-05-10 IT AS40021 NL-811-40021
deny 217.77.0.0/20; # 2025-05-10 GB AS40021 NL-811-40021

Nginx code ^^^

Works only with Apache 2.4 or newer

<RequireAll>
Require all granted

Require not ip 5.180.151.0/24
Require not ip 5.252.52.0/22
Require not ip 31.220.96.0/21
Require not ip 38.105.209.0/24
Require not ip 38.105.232.0/24
Require not ip 45.137.192.0/24
Require not ip 45.137.194.0/24
Require not ip 62.146.168.0/21
Require not ip 62.146.176.0/21
Require not ip 62.146.224.0/21
Require not ip 66.94.96.0/19
Require not ip 81.22.38.0/24
Require not ip 82.197.64.0/22
Require not ip 85.239.230.0/23
Require not ip 85.239.232.0/21
Require not ip 85.239.240.0/21
Require not ip 85.239.248.0/23
Require not ip 85.239.250.0/24
Require not ip 86.48.16.0/20
Require not ip 89.117.16.0/21
Require not ip 89.117.72.0/21
Require not ip 89.117.144.0/21
Require not ip 92.118.56.0/22
Require not ip 94.72.112.0/20
Require not ip 94.101.113.0/24
Require not ip 109.236.60.0/24
Require not ip 144.126.128.0/19
Require not ip 147.93.0.0/21
Require not ip 147.93.128.0/20
Require not ip 147.93.144.0/22
Require not ip 147.93.150.0/24
Require not ip 154.12.224.0/19
Require not ip 154.38.160.0/19
Require not ip 154.53.32.0/19
Require not ip 157.173.192.0/20
Require not ip 176.57.165.0/24
Require not ip 185.111.156.0/24
Require not ip 185.187.235.0/24
Require not ip 194.113.67.0/24
Require not ip 194.140.196.0/22
Require not ip 194.238.24.0/21
Require not ip 195.26.240.0/20
Require not ip 207.244.224.0/19
Require not ip 209.126.0.0/20
Require not ip 209.126.70.0/24
Require not ip 209.126.77.0/24
Require not ip 209.126.79.0/24
Require not ip 209.126.80.0/21
Require not ip 209.145.48.0/20
Require not ip 212.28.176.0/20
Require not ip 212.56.32.0/20
Require not ip 217.77.0.0/20
</RequireAll>

 

[T J Tutor]

I'm sure that is the "tip of the iceberg"!

Per Google AI:
"There's no precise number for the total bot networks in operation, but estimates suggest millions or even billions of bots are active on the internet. Bot traffic accounts for a significant portion of internet activity, with estimates ranging from 47.4% of all internet traffic in 2022 to 80% of web traffic in 2025."

 

[Graybeard]

This one is a VPN used to scrape websites -- for what remains to be determined.
I would pay attention to these IP ranges to see if you're getting referrals from your network advertising from this bot network.

 

[Graybeard]

Here's another --CHINA What are they scraping for and for who?

deny 1.12.0.0/14; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 1.116.0.0/15; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 42.187.128.0/17; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 42.192.0.0/15; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 42.194.128.0/17; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 43.136.0.0/13; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 43.144.0.0/15; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 43.242.252.0/22; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 43.247.196.0/22; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 45.40.192.0/20; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 45.40.208.0/21; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 45.40.224.0/19; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 49.232.0.0/14; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 58.87.64.0/18; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 62.234.0.0/16; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 81.68.0.0/14; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 82.156.0.0/15; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 94.191.0.0/17; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 101.33.144.0/20; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 101.33.160.0/19; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 101.33.192.0/18; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 101.34.0.0/15; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 101.42.0.0/15; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 103.38.116.0/22; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 103.238.18.0/23; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 106.52.0.0/14; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 109.244.0.0/16; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 110.40.128.0/17; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 110.42.128.0/17; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 111.229.0.0/16; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 111.230.0.0/15; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 114.117.0.0/16; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 114.132.0.0/16; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 115.159.0.0/16; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 118.24.0.0/15; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 118.89.0.0/16; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 118.126.64.0/18; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 118.195.128.0/17; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 119.27.160.0/19; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 119.29.0.0/20; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 119.29.16.0/21; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 119.29.24.0/22; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 119.29.28.0/24; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 119.29.30.0/23; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 119.29.32.0/19; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 119.29.64.0/18; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 119.29.128.0/17; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 119.45.0.0/16; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 119.91.0.0/16; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 120.53.0.0/16; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 120.232.18.0/23; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 120.232.20.0/22; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 120.232.24.0/21; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 120.232.32.0/23; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 120.232.130.0/23; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 120.233.108.0/22; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 120.241.127.0/24; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 120.241.128.0/21; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 120.241.149.0/24; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 120.241.150.0/23; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 121.4.0.0/15; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 121.51.0.0/16; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 122.51.0.0/16; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 122.152.192.0/18; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 123.206.0.0/15; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 124.220.0.0/14; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 128.108.0.0/16; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 129.28.0.0/16; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 129.204.0.0/16; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 129.211.0.0/16; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 132.232.0.0/16; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 134.175.0.0/16; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 139.155.0.0/16; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 139.186.0.0/16; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 139.199.0.0/16; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 140.143.0.0/16; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 146.56.192.0/18; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 148.70.0.0/16; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 150.158.0.0/16; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 152.136.0.0/16; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 154.8.128.0/17; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 159.75.0.0/16; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 162.14.40.0/21; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 162.14.64.0/18; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 162.14.128.0/17; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 172.81.192.0/18; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 175.24.0.0/16; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 175.27.0.0/16; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 175.178.0.0/16; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 182.254.0.0/18; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 182.254.64.0/19; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 182.254.96.0/20; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 182.254.112.0/22; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 182.254.117.0/24; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 182.254.118.0/23; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 182.254.120.0/21; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 182.254.128.0/17; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 183.232.224.0/24; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 188.131.128.0/17; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 192.144.128.0/17; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 193.112.0.0/16; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 203.195.128.0/17; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 210.73.160.0/19; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 211.159.128.0/17; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 212.64.0.0/17; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited
deny 212.129.128.0/17; # 2025-05-11 CN AS45090 Shenzhen Tencent Computer Systems Company Limited

 

[T J Tutor]

!!! WOW !!! WOW !!! WOW !!!

​

 

[Graybeard]

All these botnets serve different purposes.
This Chinese one? No clue—maybe scanning for intellectual property to rip off, who knows.
But here's what I do know: this is SEO poisoning on steroids.
They just got nailed, and Google’s going to notice—especially when their name shows up fifty times in one blacklist.
So yeah, let’s go ahead and block the hell out of them.
(Oh, and happy Mother’s Day, by the way.)

 

[T J Tutor]

SEO poisoning on steroids.

Exactly, and it will continue...