[Coco] Someones bots are abusing my downloads

Gene Heskett gheskett at shentel.net
Fri Nov 1 23:09:22 EDT 2019


On Friday 01 November 2019 21:18:02 Dave Philipsen wrote:

> Just any FYI. If you’re running dd-wrt on your router there is a very
> good possibility it has iptables. Every dd-wrt installation I’ve ever
> played around with did. And if your server is on a Raspberry-Pi
> running raspbian then it’s pretty easy to install if it doesn’t
> already have it.
>
> Dave

That it does, but then I have to search this midden heap for the last 
password to get into it. I seem to have them blocked for the momemt with 
hosts.deny rules specifying their block address.  At my age, I am 
beginning to suspect this train needs a smarter conductor :)
>
> > On Nov 1, 2019, at 4:46 PM, Gene Heskett <gheskett at shentel.net>
> > wrote:
> >
> > On Friday 01 November 2019 15:46:25 Dave Philipsen wrote:
> >> A little iptables work should solve your problem.
> >
> > No iptables except what in the router, which is dd-wrt. But listing
> > their addy in CIDR format in hosts.deny is a bunch easier and seems
> > to be working. I just wish it was keeping a log so I could see the
> > reaction when there was a hit. And bingbot just came to the party. 
> > And yandex is hammering at 1 second intervals but no response is
> > being issued.
> >
> > And its a good thing I made coffee an hour back, now we have no
> > water in this neighborhood. No biggie for a few hours, plenty in the
> > fridge for my crippled missus.
> >
> > Thanks Dave, this stuff keeps me out of the bars.
> >
> >>> On Nov 1, 2019, at 12:54 PM, Bill Gunshannon
> >>> <bill.gunshannon at hotmail.com> wrote:
> >>>
> >>> On 11/1/19 1:49 PM, Ken Flanagan wrote:
> >>>>> On Fri., Nov. 1, 2019, 10:35 a.m. Gene Heskett,
> >>>>> <gheskett at shentel.net> wrote:
> >>>>>
> >>>>> They ae not just indexing my place, they were sucking the whole
> >>>>> thing, one file at a time and keeping my 250 kilobaud uplink
> >>>>> bandwidth full for the last 4 or so hours.  That a DDOS AFAIAC.
> >>>>> Kill them on sight. Here is typical log entry:
> >>>>>
> >>>>> coyote.coyote.den:80 46.229.168.141 - -
> >>>>> [01/Nov/2019:13:33:16 -0400] "GET
> >>>>> /gene/nitros9/3rdparty/packages/uucpbb/doc/uucp.man
> >>>>> HTTP/1.1" 200 3142 "-" "Mozilla/5.0 (compatible;
> >>>>> SemrushBot/6~bl; +http://www.semrush.com/bot.html)"
> >
> > Cheers, Gene Heskett
> > --
> > "There are four boxes to be used in defense of liberty:
> > soap, ballot, jury, and ammo. Please use in that order."
> > -Ed Howdershelt (Author)
> > If we desire respect for the law, we must first make the law
> > respectable. - Louis D. Brandeis
> > Genes Web page <http://geneslinuxbox.net:6309/gene>
> >
> > --
> > Coco mailing list
> > Coco at maltedmedia.com
> > https://pairlist5.pair.net/mailman/listinfo/coco


Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page <http://geneslinuxbox.net:6309/gene>


More information about the Coco mailing list