itsnikolayy

You can find me at GitGud:

itsnikolayy

    location ~ ^/restapi/(v\d+(\.\d+)?)/(.+)$ {

          set $directive "RESTful File Handle";

          limit_req zone=apilimit burst=10 nodelay;
          
          upload_pass @rest;
          upload_store /data/tmp/nginx_uploads 1;
       
          upload_set_form_field $upload_field_name.name "$upload_file_name";

itsnikolayy

user nobody nogroup;
worker_processes 2;
pid /var/run/nginx.pid;

http {
   types {
       application/javascript js;
       application/json       json;
       application/pdf        pdf;
       application/xml        xml;

itsnikolayy

0:0:0	XEROX CORPORATION
0:0:1	XEROX CORPORATION
0:0:10	SYTEK INC.
0:0:11	NORMEREL SYSTEMES
0:0:12	INFORMATION TECHNOLOGY LIMITED
0:0:13	CAMEX
0:0:14	NETRONIX
0:0:15	DATAPOINT CORPORATION
0:0:16	DU PONT PIXEL SYSTEMS     .
0:0:17	TEKELEC

itsnikolayy

create knownHttpAttackSourcesSet0 hash:ip family inet hashsize 1024 maxelem 65536
add knownHttpAttackSourcesSet0 1.0.134.179
add knownHttpAttackSourcesSet0 1.0.209.23
add knownHttpAttackSourcesSet0 1.1.163.86
add knownHttpAttackSourcesSet0 1.1.224.206
add knownHttpAttackSourcesSet0 1.1.224.57
add knownHttpAttackSourcesSet0 1.1.228.9
add knownHttpAttackSourcesSet0 1.10.140.44
add knownHttpAttackSourcesSet0 1.10.188.93
add knownHttpAttackSourcesSet0 1.197.16.37

itsnikolayy

create knownSSHAttackSourcesSet0 hash:ip family inet hashsize 1024 maxelem 65536
add knownSSHAttackSourcesSet0 1.0.150.10
add knownSSHAttackSourcesSet0 1.10.189.111
add knownSSHAttackSourcesSet0 1.100.105.5
add knownSSHAttackSourcesSet0 1.100.113.53
add knownSSHAttackSourcesSet0 1.100.115.153
add knownSSHAttackSourcesSet0 1.100.134.2
add knownSSHAttackSourcesSet0 1.100.138.210
add knownSSHAttackSourcesSet0 1.100.144.106
add knownSSHAttackSourcesSet0 1.100.150.207

itsnikolayy

# global config file for Barracuda WebApplication Firewall
# product=bws
# The above line is used to check for the correct product upon restoring a
# config. Do not change or remove it.
#
# each line below may be one of the following:
#    blank line
#    comment: any line beginning with a "#" sign - please note
#        that # in the middle of the line will not be considered a comment

itsnikolayy

VARNISHD(1)                                                        VARNISHD(1)

NAME
       varnishd - HTTP accelerator daemon

SYNOPSIS

       varnishd
              [-a [name=][listen_address[,PROTO]] [-b [host[:port]|path]] [-C]
              [-d] [-F] [-f config] [-h type[,options]] [-I clifile] [-i

itsnikolayy

Anything with a question mark means I'm not 100% sure
CDNs that belong to the same company but are known by other names are listed separately. i.e. Edgio/Edgecast/Layer0

Links to the cdns and software have been linked below

Cloudflare      Pingora? -> Pingora? (formerly NGINX/Open Resty)
Azion           \ NGINX -> Apache Traffic Server?
Bunny           \ NGINX
Google Cloud CDN Envoy? -> ?
Keycdn          nginx -> ?

itsnikolayy

This will likely never be completed.

Some of the IPs are ssl and nossl.

64.12.16.0/24 - Frankfurt, Germany

64.12.32.0/24 - Tokyo, Japan

64.12.48.0/24 - Dallas, Texas