[arm-allstar] Blocking incoming specific IP's

Mr. Possum (Bill) flatpossum1231 at yahoo.com
Sun Aug 19 12:08:33 EDT 2018


When I was working on one of my nodes this morning I noticed that I am getting HAMMERED by some IP over in france that has been reported for IPBX probing....
Here's the output on my CLI - 


  == Connect attempt from '212.83.150.74' unable to authenticate
  == Connect attempt from '212.83.150.74' unable to authenticate
  == Connect attempt from '212.83.150.74' unable to authenticate
  == Connect attempt from '212.83.150.74' unable to authenticate
  == Connect attempt from '212.83.150.74' unable to authenticate
  == Connect attempt from '212.83.150.74' unable to authenticate
  == Connect attempt from '212.83.150.74' unable to authenticate
  == Connect attempt from '212.83.150.74' unable to authenticate
  == Connect attempt from '212.83.150.74' unable to authenticate
  == Connect attempt from '212.83.150.74' unable to authenticate
  == Connect attempt from '212.83.150.74' unable to authenticate
  == Connect attempt from '212.83.150.74' unable to authenticate
  == Connect attempt from '212.83.150.74' unable to authenticate
  == Connect attempt from '212.83.150.74' unable to authenticate
  == Connect attempt from '212.83.150.74' unable to authenticate
  == Connect attempt from '212.83.150.74' unable to authenticate
Independence*CLI>

It hits every couple of seconds...
Here's the info on the Ip address - https://www.abuseipdb.com/check/212.83.150.74
What I would like to do is use something like ipset to just block that specific IP address....  But I find that ipset isn't on our little RasPi images...
So, does anyone have a suggestion to easily block some IP's off of a list?
Thanks!
Bill - N5MBM






More information about the arm-allstar mailing list