Alpha Strike Labs IP ranges

Current IP ranges (CIDRs) used by the Alpha Strike Labs scanner, updated daily.

curl -O https://cloud-ip-ranges.com/download/alpha-strike-labs.txt

Blocking Alpha Strike Labs

iptables

curl -sO https://cloud-ip-ranges.com/download/alpha-strike-labs.txt
while read ip; do
  iptables -A INPUT -s $ip -j DROP
  iptables -A OUTPUT -d $ip -j DROP
done < alpha-strike-labs.txt

ufw

curl -sO https://cloud-ip-ranges.com/download/alpha-strike-labs.txt
while read ip; do
  ufw deny from $ip
  ufw deny to $ip
done < alpha-strike-labs.txt

fail2ban

sudo tee /etc/fail2ban/filter.d/alpha-strike-labs-block.conf << EOF
[Definition]
failregex = ^.*$
ignoreregex =
EOF

sudo tee /etc/fail2ban/jail.d/alpha-strike-labs-block.conf << EOF
[alpha-strike-labs-block]
enabled = true
filter = alpha-strike-labs-block
action = iptables-allports[name=alpha-strike-labs]
logpath = /tmp/alpha-strike-labs.txt
findtime = 1
bantime = -1
maxretry = 1
EOF

curl -so /tmp/alpha-strike-labs.txt https://cloud-ip-ranges.com/download/alpha-strike-labs.txt
sudo systemctl restart fail2ban

pfSense / OPNsense

curl -sO https://cloud-ip-ranges.com/download/alpha-strike-labs.txt
# Firewall > Aliases: new alias ALPHA-STRIKE-LABS_BLOCK, type Network(s), import the file
# Firewall > Rules > WAN: Action=Block, Source=ALPHA-STRIKE-LABS_BLOCK

About

These are the addresses Alpha Strike Labs scans the internet from, updated regularly. Use them to tag background scanning in your firewall and IDS logs so it does not read as a targeted attack, or to block the scanner outright if you would rather not be indexed. Last update was about 21 hours ago.

Other providers

AirVPN, Akamai, Alibaba, Amazonbot, Amzn-SearchBot, Amzn-User, Anthropic, AppleBot, Atlassian, AWS, Azure, Backblaze, Baidu, BinaryEdge, BingBot, Bunny, CacheFly, CCBot, Censys, ChatGPT-User, ClaudeBot, Cloudflare, Datadog, DigitalOcean, DuckDuckBot, Fastly, Gabia, G-Core, GitHub, Googlebot, Google Cloud, Google Public DNS, Google Services, GPTBot, Hetzner, Hostway, Huawei Cloud, IBM Cloud, iCloud Private Relay, Internet Archive, IVPN, Leaseweb, Linode, Meta, Microsoft 365, Mistral, Mullvad, NHN Cloud, NordVPN, OpenAI ChatGPT, OpenAI SearchBot, Oracle Cloud, OVHcloud, OVPN.com, PerplexityBot, Perplexity-User, Pingdom, Private Internet Access, QUIC.cloud, Rackspace, Rapid7 Sonar, Salesforce, Scaleway, Shodan, StatusCake, StormWall, Stretchoid, Sucuri, Telegram, Tencent, TOR, UpCloud, UptimeRobot, Vultr, Wasabi, Windscribe, Yandex, Zoho, Zoom, Zscaler