Forum libero

http://trilema.com/2018/how-to-remove-usgalphabet-...
per chi non ha voglia di aprire il link faccio copia incolla dell'articolo...
You may think that this is "easy" to do. It isn't, and there will be collateral damage, because for instance

Website using this ip : 216.58.217.100
fourcoffeebeans.com
google.com.jo
jyiwg888.com
feiche28.com
afe698.com
bta601.com

It's a spam farm, what. The fact that it serves a particular criminal gang as opposed to any other changes nothing of practical interest. Banning google means you'll be banning all sorts of "innocents" who "just wanted to" and so forth.

Fuck them ; and moving on :

$ curl -s http://download.maxmind.com/download/geoip/databas... | gunzip | cut -d"," -f3 | sed 's/"//g' | sort -u | grep "oogle"
> AS15169 Google LLC
> AS16591 Google Fiber Inc.
> AS19527 Google LLC
> AS36040 Google LLC
> AS36384 Google LLC
> AS36385 Google LLC
> AS36492 Google
> AS394699 Google Access LLC
> AS395973 Google LLC
> AS41264 Google Switzerland GmbH
> AS43515 Google Ireland Limited

Now it's time to recursively

$ curl https://www.robtex.com/as/AS15169.html >> robtex.txt

for all those AS values discovered before, and then

$ cat robtex.txt | tr "\n" " " | sed 's%</table><h3>%\n%g' | awk '{print $1}' | sort -u | grep -E "\b([0-9]{1,3}\.){3}[0-9]{1,3}\b" > googips.txt

Consolidated, that yields 7990784 IPs in 78 disjunct network blocks :

8.6.48.0/21
8.8.4.0/24
8.8.8.0/24
8.15.202.0/24
8.34.208.0/20
8.35.192.0/20
12.216.80.0/24
23.236.48.0/20
23.251.128.0/19
23.255.128.0/17
35.184.0.0/13
45.56.0.0/18
45.121.228.0/22
64.9.224.0/19
64.15.112.0/20
64.18.0.0/20
64.233.160.0/19
66.102.0.0/20
66.249.64.0/19
70.32.128.0/19
72.14.192.0/18
74.114.24.0/21
74.125.0.0/16
89.207.224.0/21
99.198.128.0/17
103.62.64.0/22
103.86.148.0/24
104.132.0.0/14
104.154.0.0/15
104.196.0.0/14
104.237.160.0/19
107.167.160.0/19
107.178.192.0/18
107.188.128.0/17
108.59.80.0/20
108.170.192.0/18
108.177.0.0/17
113.197.104.0/22
130.211.0.0/16
136.22.0.0/23
136.22.64.0/18
136.22.129.0/24
136.32.0.0/11
142.250.0.0/15
146.148.0.0/17
159.192.27.0/24
162.216.148.0/22
162.222.176.0/21
172.102.8.0/21
172.110.32.0/21
172.217.0.0/16
172.253.0.0/16
173.194.0.0/16
173.255.112.0/20
185.25.28.0/22
185.150.148.0/22
192.104.160.0/23
192.119.16.0/20
192.158.28.0/22
192.178.0.0/15
192.200.224.0/19
193.200.222.0/24
194.122.80.0/22
199.36.152.0/22
199.192.112.0/22
199.223.232.0/21
207.223.160.0/20
208.65.152.0/22
208.68.108.0/22
208.81.188.0/22
208.117.224.0/19
209.85.128.0/17
209.107.176.0/20
216.21.160.0/20
216.58.192.0/19
216.73.80.0/20
216.239.32.0/19
216.252.220.0/22

Now we're ready to get rid of Alphabet, and permanently :

sudo iptables -A INPUT -s $evilempire -j DROP

and

sudo iptables -A OUTPUT -d $evilempire -j DROP

Here's a handy script to do it for you (and restart the network) : fuck-the-evil-empire.sh. Drop it in all your terminals today, and enjoy knowing that you're part of the solution rather than part of the problem, and that under your hand old women will be either useful or quiet.

PS. Bear in mind this minimal step towards a hygienic web (and therefore world) is no substitute for OpSec. It's entirely possible (and from experience, likely) they're snooping through IPs they don't advertise the ownership of.