I have compiled a decent list of host names, for sysops to put in their hostname filter. If you run Synchronet, open up your host name filter and copy and paste these hosts. It should tamp down a good majority of malicious attacks. Some of these hostnames, look like legit hosts. Don't be fooled, I have researched this hosts and guarantee these are malicious hosts.

azpdweq95i0h.stretchoid.com
as13285.net
mcleod.probe.onyphe.net
olive.probe.onyphe.net
ip-078-094-226-221.um19.pools.vodafone-ip.de
um19.pools.vodafone-ip.de
rafe.probe.onyphe.net
acevedo.probe.onyphe.net
um19.pools.vodafone-ip.de
new-ubuntu20223240.aspadmin.net
mail.shegertravel.com
*.tidalcoinage.internet-measurement.com
li.binaryedge.ninja
ptr.pfcloud.network
rnd.group-ib.com
o060.scanner.modat.io
dyn.optonline.net
ip.linodeusercontent.com
tammy.probe.onyphe.net
static.tpgi.com.au
www.internet-albedo.net
.ptr.pfcloud.network
cool-silver.ptr.network
prod-barium-us-southeast-52.li.binaryedge.ninja
prod-boron-us-east-23.li.binaryedge.ninja
ool-44c5a1bb.dyn.optonline.net
einstein.census.shodan.io
hosted-by.vmheaven.iolsv2.qwest.net
dyn.optonline.net
.clients.your-server.de
*.xyz
*.top
*.gq
*.tk
*.googleusercontent.com
*.linode.com
*ovh.net
*bit.ly
*tinyurl.com
*.guru
*.top
*.ga
*scanner
*crawler
*censys
*shodan
*.digitalocean.com
*hetzner.de
draconiankittens.*
ubtuntu20236116.aspadmin.net
122.153.132.66.censys-scanner.com
net-research-scan-5.mpi-inf.mpg.de
scan.visionheight.com
censys-scanner.com
vpn.bullantcomm.com
scanner-18-97-5-37.reposify.net
*scan
scanner-18-97-5-37.reposify.net
crawl.amazonbot.amazon
.customers.ownit.se
vpn.bullantcomm.com
*vpn
*scan
scan*
vpn*
mail.cloudworks.mx
*cloud
cloud*
.crawl.amazonbot.amazon
*amazon
amazon*
127.34.168.206.censys-scanner.com
censys-scanner.com
204.76.203.69.ptr.pfcloud.network
ptr.pfcloud.network
prod-barium-us-east-67.li.binaryedge.ninja
arabella.probe.onyphe.net
prod-boron-sfo2-79.do.binaryedge.ninja
vmi3097304.contaboserver.net
181.180.205.92.host.secureserver.net
host.secureserver.net
*host
on calm.monitoring.internet-measurement.com
monitor*
*monitor
compute.hwclouds-dns.com
* 172-232-9-106.ip.linodeusercontent.com
* 49824f5c.tidalcoinage.internet-measurement.com
wfa.stretchoid.com
fe71b7ca.tidalcoinage.internet-measurement.co static.71.44.167.89.clients.your-server.de 23-31-96-97-static.hfc.comcastbusiness.net
azpdcg3yi26e.stretchoid.com
martha.probe.onyphe.net
azpdssv1rxtq.stretchoid.com
azpdsgw144la.stretchoid.com
on b.barracudacentral.org:
*cloud
*vpn
*hosting
*free
*scan
*server
*host
*azure
privateaccess.no-ip.com
*private
*access
myhomevpn.duckdns.org
ssl-vpn.yourdomain.com
*ssl
*remote
*connect
*tore
*.duckdns.org
*.no-ip.com
*.hopto.org
*.linode.com
*.digitalocean.com
*.ovh.net
*.hetzner.com
*reverse
no-reverse-dns-configured.com
*dns
*configure
*configure
*bot*
*crawler*
*scanner*
*.ru*
*.cn,*
*.tk*
*.tor
*tor
*.arpa
*arpa
*gmai.com
*.ru
*ru
*.cn
*cn
*.tk
*tk
*.recyber.net,
*.ucloud.com.hk
ultrusercontent.com
open-source-groupware.com
o069.scanner.modat.io
~scanner
~scan
~content
~cloud
~tk
~cn
~tor
~arpa
~gmai
~bot
~vpn
~host
~tore
~free
~cloud
~hosting
~vm
vmi3148153.contaboserver.net
e: rnd.group-ib.com
-host.colocrossing.com
dynamic.jazztel.es
~monitor
ns5006824.ip-51-222-240.net
~tiny
~tidalcoinage.internet-measurement.com
~measure
~measurement
~redirect
~list
ns5006824.ip-51-222-240.net
azpdcexdg7i9.stretchoid.com
~china
~iran
~russia
~rus
~brazil
~scan
~scanner
o004.scanner.modat.io
censys-scanner.com
vmi3148153.contaboserver.ne
*vm
2d34d9e5.tidalcoinage.internet-measurement.com
.compute.hwclouds-dns.co
~compute
*compute
~clouds
o062.scanner.modat.io
azpdsss5fjwq.stretchoid.com
o017.scanner.modat.io
*scanner
scanner*
o053.scanner.modat.io
o012.scanner.modat.io
*.scanner.modeat.io
~.scanner.modeat.io
digimobil.esdigimobil.es
49824f5c.tidalcoinage.internet-measurement.com
digimobil.es
49824f5c.*.*
o056.scanner.modat.io
o032.scanner.modat.io
o051.scanner.modat.io
1698d28f.tidalcoinage.internet-measurement.com 21514a01.tidalcoinage.internet-measurement.com
abubakar.probe.onyphe.net
o069.scanner.modat.io
*.ptr.pfcloud.network
o069.scanner.modat.io
azpdceoc78r8.stretchoid.com
um19.pools.vodafone-ip.de
*probe
probe.*
~probe
probe~
*.censys-scanner.com
vmi807594.contaboserver.net
contaboserver.net
ecs-111-119-220-50.compute.hwclouds-dns.com
* scanner-44-220-188-123.reposify.net
scanner-44-220-188-123.reposify.net
*.reposify.net

---
þ Synchronet þ Hobby Space - Express Yourself hobbyspc.vert.synchro.net

Thanks! I just implemented the list. Looking forward to a trillion less probes by bots!

You will notice immediately lol! Have you seen it blocking bots in your log yet?

---
þ Synchronet þ Hobby Space - Express Yourself hobbyspc.vert.synchro.net

You will notice immediately lol! Have you seen it blocking bots in your log yet?

---

Certainly seems like a lot less traffic. Haven't check logs yet. Will try later tonight.

Yeah I like looking at the logs and watching the bots get denied. Haha it's very, um, how do I word this....hilarious hahaha. Man I'm up at hospice with
my sister, she took a turn for the worst. This may be the last day I ever get to chill with her again.

---
þ Synchronet þ Hobby Space - Express Yourself hobbyspc.vert.synchro.net

It also helps I have 230 counties blocked at the edge with firewall rules :D

---
þ Synchronet þ Hobby Space - Express Yourself hobbyspc.vert.synchro.net

Yeah, I know.. I remember that one day you showed me the log, and there were thousands that tried to get one...I bet they were all malicious. Not one of those connections were probably legit.

---
þ Synchronet þ Hobby Space - Express Yourself hobbyspc.vert.synchro.net