On 2/23/25 6:19 AM, Jonas Maebe via fpc-devel wrote:
On 22/02/2025 18:40, Werner Pamler via fpc-devel wrote:
Am 22.02.2025 um 09:25 schrieb Jonas Maebe via fpc-devel:
Many of them have been blacklisted automatically already by fail2ban. I'll
manually blacklist all of their IP ranges now.
Thank you. It's working again.
They're not giving up...
3 135K 8094K REJECT all -- * * 0.0.0.0/0
0.0.0.0/0 source IP range 47.74.0.0-47.87.255.255 reject-with
icmp-port-unreachable
(the 135K is the number of packets, the 8098K is the number of bytes)
FWIW: instead of rejecting, i would drop... that way their networking stack has
to wait on timeouts and adds a delay load to their stuff... dropping also makes
you "invisible" to them... with your rejects, your (icmp) responses tell them
the system still exists, so they keep hammering...
--
NOTE: No off-list assistance is given without prior approval.
*Please keep mailing list traffic on the list where it belongs!*
_______________________________________________
fpc-devel maillist - fpc-devel@lists.freepascal.org
https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-devel
