Re: 92.51.2.78/24 (AS209588) from Russia with love ... for SQL injection attempts

On 11.07.2024 um 11:04 Uhr Randolf Richardson 張文道 wrote:

I'm wondering, has anyone encountered attacks from
any other IP addresses in this /24?  I'm not finding
anything aside from 95.51.2.78 in our logs.

I assume this is just a hacked machine that is being part of a botnet.
It isn't even listed on uceprotect, spamhaus nor blocklist, so the
amount of attacks to a wide range of addresses isn't that much.

fail2ban should handle that.

--
kind regards
Marco

Send spam to 1720688663muell@cartoonies.org