• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion
  • Inviting everyone to the UX test of a new security feature in the WP Toolkit
    For WordPress site owners, threats posed by hackers are ever-present. Because of this, we are developing a new security feature for the WP Toolkit. If the topic of WordPress website security is relevant to you, we would be grateful if you could share your experience and help us test the usability of this feature. We invite you to join us for a 1-hour online session via Google Meet. Select a convenient meeting time with our friendly UX staff here.

Question Blocking Entire Netblocks

J

Jasonm

New Pleskian
Hello,

Over the past week I have been getting slammed by scans and hack attempts by a large netblock located in China. I see many thousands of attempts in /var/log/secure /var/log/maillog

Fail2Ban has thousands of IPs listed and it continues to grow.

Is there anyway to block a netblock entirely? 222.184.0.0 - 222.191.255.255

At this point I'd rather block them completely then keep sending requests to stop the hacking. It appears to me like all of the IPs in this range are used for this purpose as there are more in my logs then I can count.

Regards,

Jason
 
Jasonm said:
Hello,

Over the past week I have been getting slammed by scans and hack attempts by a large netblock located in China. I see many thousands of attempts in /var/log/secure /var/log/maillog

Fail2Ban has thousands of IPs listed and it continues to grow.

Is there anyway to block a netblock entirely? 222.184.0.0 - 222.191.255.255

At this point I'd rather block them completely then keep sending requests to stop the hacking. It appears to me like all of the IPs in this range are used for this purpose as there are more in my logs then I can count.

Regards,

Jason
Click to expand...


Should have checked this a little more. I created a custom Deny rule for 222.184.0.0/13
 
You must log in or register to reply here.

Similar threads

T
Resolved SECURITY - attack surface : ports 7080 and 7081
2
Replies
30
Views
11K
2dareis2do
2
Bitpalast
Input Please vote for a feature to solve this for good: Email login fails with "failed auth" despite correct password from some Android, iPhone, Outlook
Replies
2
Views
1K
Bitpalast
Bitpalast
D
Issue Server is sending spam
Replies
5
Views
4K
Bitpalast
Bitpalast
B
Question Firewall - watch out for gap in cover - Is there a solution?
Replies
1
Views
747
Brujo
Brujo
M
Input How my firewall helped in uncovering a malicious PHP-script
Replies
1
Views
2K
virtubox
virtubox
Back
Top