search for: badbots

On Sun, Aug 28, 2016 at 5:23 PM, Keith Keller <kkeller at wombat.san-francisco.ca.us> wrote: > On 2016-08-28, TE Dukes <tdukes at palmettoshopper.com> wrote: > >> Right now, I'm just trying to take some load off my >> home server from badbots but I am getting hit on other services as well. > > Another possibility for you to look at is sshguard. It can protect > against brute force ssh attacks (using iptables rules, which is how I > use it) but IIRC it can also protect against http attacks (I've never > used it that w...

Hello, I have been using ipset to blacklist badbots. Works like a champ! The only problem is if I do a system reboot, I lose the ipset and the rule. I changed /etc/sysconfig/iptables.conf to: IPTABLES_SAVE_ON_RESTART="yes" IPTABLES_SAVE_ON_STOP="yes" And followed the instructions in: https://www.centos.org/forums/viewtopic....

...t; for this purpose, or to allow home users to configure such blocks themselves. > > --keith > [Thomas E Dukes] I setup an ipset but quickly ran out of room in the set. I guess I'll have to setup multiple sets. Right now, I'm just trying to take some load off my home server from badbots but I am getting hit on other services as well. There's nothing on the webserver except a test site I use. Just trying to keep out the ones that ignore robots.txt Thanks!!

...s.org [mailto:centos-bounces at centos.org] On > Behalf Of John R Pierce > Sent: Sunday, September 11, 2016 10:44 PM > To: centos at centos.org > Subject: Re: [CentOS] Iptables not save rules > > On 9/11/2016 8:55 AM, TE Dukes wrote: > > I have been using ipset to blacklist badbots. Works like a champ! > > > > The only problem is if I do a system reboot, I lose the ipset and the rule. > > > > I changed /etc/sysconfig/iptables.conf to: > > > > IPTABLES_SAVE_ON_RESTART="yes" > > IPTABLES_SAVE_ON_STOP="yes" > >...

...rom a quick Google search it seems like you > can increase the size of an ipset (or make a new larger one and migrate your > IPs to the new one). Multiple sets looks like it'd work as well. > > > Right now, I'm just trying to take some load off my home server from > > badbots but I am getting hit on other services as well. > > Another possibility for you to look at is sshguard. It can protect against brute > force ssh attacks (using iptables rules, which is how I use it) but IIRC it can > also protect against http attacks (I've never used it that way,...

...2Ban Service... Apr 09 09:26:13 server.my.domain systemd[1]: Started Fail2Ban Service. Apr 09 09:26:13 server.my.domain fail2ban-server[8545]: Server ready Fail2ban seems to be running fine: [root at server ~]# fail2ban-client status Status |- Number of jail: 6 `- Jail list: apache, apache-badbots, apache-nohome, apache-noscript, apache-overflows, openvpn No errors loged in fail2ban.log on restart: [...] 2020-04-09 09:26:13,773 fail2ban.server [8545]: INFO Starting Fail2ban v0.10.5 2020-04-09 09:26:13,799 fail2ban.database [8545]: INFO Connected to fail2ban persistent da...

...miliar with ipsets, but from a quick Google search it seems like you can increase the size of an ipset (or make a new larger one and migrate your IPs to the new one). Multiple sets looks like it'd work as well. > Right now, I'm just trying to take some load off my > home server from badbots but I am getting hit on other services as well. Another possibility for you to look at is sshguard. It can protect against brute force ssh attacks (using iptables rules, which is how I use it) but IIRC it can also protect against http attacks (I've never used it that way, so I don't know...

Hello, I have ipsets setup with a set of ip address that are badbots that won't comply with robots.txt This is a home server and these are most likely up to no good. I came up with a script to extract ip address from my access_log then another script to take ips and import them into my blacklist set. (see my scripts in the .htaccess thread) I can set these u...

On 9/11/2016 8:55 AM, TE Dukes wrote: > I have been using ipset to blacklist badbots. Works like a champ! > > The only problem is if I do a system reboot, I lose the ipset and the rule. > > I changed /etc/sysconfig/iptables.conf to: > > IPTABLES_SAVE_ON_RESTART="yes" > IPTABLES_SAVE_ON_STOP="yes" > > And followed the instructions in:...

...but the bandwidth on my dsl. > If you have another system on your home network, try a speed test. If it > performs crappy you probably have a problem with attackers eating your > bandwidth. > [Thomas E Dukes] I have a fire stick on my network that I stream movies. Getting beatup by badbots isn't helping. > You and another poster mentioned fail2ban; if you can get that configured to > watch and protect both sshd and httpd that will help both problems quite a > bit. [Thomas E Dukes] I have all the jails setup for the services I'm running. Not sure its working. Not g...

Hello, My home system on a DSL line is getting worn out by bad behavior robots. Awhile back, I created a .htaccess file that block countries by IP blocks. Its 2MB in size. I have been running Linux since Slackware 1.0 and moved to Redhat around 2.0. I started after running a BBS using a doorway for newsgroups. Been hooked ever since. So, today, I tried following the directions for