Re: [sr #111185] A probable IP Block

[Gustavo Diaz]

Thank you so much!

El mié, 5 de feb de 2025, 3:43 p. m., Bob Proulx <INVALID.NOREPLY@gnu.org>
escribió:

> Update of sr #111185 (group administration):
>
>                   Status:                    None => Done
>              Assigned to:                    None => rwp
>              Open/Closed:                    Open => Closed
>
>     _______________________________________________________
>
> Follow-up Comment #1:
>
> Hi Adrian! Yes that IP address was on the block list due to the botnet
> abuse
> hitting on the signature pattern. This botnet is at least 3 million strong
> of
> compromised devices! Probably security cameras but don't know.
>
> I have removed it from there and added it to an allow list. Unfortunately I
> don't know of any list of IPS shared addresses in which to protect in this
> way. Which means we can only react.
>
> I have hacked in a rule some days ago that if a good git transaction is
> seen
> previously then it is added to a list which then prevents that address from
> going on the block list. It's not perfect but it is the best I know to do
> for
> the moment.
>
> Thank you for writing! It's always good to communicate and sync up!
>
>
>
>     _______________________________________________________
>
> Reply to this item at:
>
>   <https://savannah.nongnu.org/support/?111185>
>
> _______________________________________________
> Message sent via Savannah
> https://savannah.nongnu.org/
>