sure, i will just treat this /16 as hostile and add ips to “good_ips” when I find instances on hetzner that aren’t this
graf:~$ sudo ipset create bad_asns hash:net hashsize 131072 counters
graf:~$ sudo ipset create bad_ips hash:ip hashsize 16384 counterss
graf:~$ sudo ipset create good_ips hash:ip hashsize 4096
graf:~$ sudo iptables -A INPUT -m set --match-set good_ips src -j ACCEPT
graf:~$ sudo iptables -A INPUT -m set --match-set bad_ips src -j DROP
graf:~$ sudo iptables -A INPUT -m set --match-set bad_asns src -j DROP
graf:~$ sudo ipset add bad_asns 65.109.0.0/16
anime graf mays 🛰️🪐 /
npub108z…dkr5
2023-08-27 21:28:54
in reply to nevent1q…6nhq
Author Public Key
npub108zt8c43ulvdwnax2txurhhr07wdprl0msf608udz9rvpd5l68ascvdkr5Seen on
wss://relay.noswhere.comPublished at
2023-08-27 21:28:54Event JSON
{
"id": "64bf388f01c7ef2d4711b7fbe9a849b122c0a0183c0e822b4724707f503d0438",
"pubkey": "79c4b3e2b1e7d8d74fa652cdc1dee37f9cd08fefdc13a79f8d1146c0b69fd1fb",
"created_at": 1693164534,
"kind": 1,
"tags": [
[
"p",
"c8d5a41d8a4341c35896ac790dfede47417fe5e70c7c7fb63f6a5ba0d08359f9",
"wss://relay.mostr.pub"
],
[
"p",
"003d7fd21fd09ff7f6f63a75daf194dd99feefbe6919cc376b7359d5090aa9a6",
"wss://relay.mostr.pub"
],
[
"p",
"7efd4eb4e1c69cbfaf5e4e9d2cf115b841c1e3473d54ccd279afb85fda40ebfe",
"wss://relay.mostr.pub"
],
[
"p",
"c5cf39149caebda4cdd61771c51f6ba91ef5645919004e5c4998a4ea69f00512",
"wss://relay.mostr.pub"
],
[
"p",
"eb33801968abffa69f75ec45d42de262bed995a2069c5d1a42da1f97735f3f30",
"wss://relay.mostr.pub"
],
[
"p",
"46ac28cf6a29f4163a82bd054c774a09f1a6ecf533615dd19dc87f9579fefdd8",
"wss://relay.mostr.pub"
],
[
"p",
"445596aab79ca6d4c6e00b7a881a57e386e58b708c582a858565032a0f7b4eb6",
"wss://relay.mostr.pub"
],
[
"p",
"14fac33f299949ee9572e1b41c5e4de0f6e564f5499c64ff7de703213e94399f",
"wss://relay.mostr.pub"
],
[
"p",
"8b68878410f4d8bb393a0d21b85b347fba6b2d429fd1339cff34c48968b33304",
"wss://relay.mostr.pub"
],
[
"e",
"346debaf222f17aee5e868e99d5553afdaf775860620613fa02d834db2d279cb",
"wss://relay.mostr.pub",
"reply"
],
[
"proxy",
"https://poa.st/objects/4d07ffe1-de55-476b-b48d-17780b18d0cf",
"activitypub"
]
],
"content": "sure, i will just treat this /16 as hostile and add ips to “good_ips” when I find instances on hetzner that aren’t this\n\ngraf:~$ sudo ipset create bad_asns hash:net hashsize 131072 counters\ngraf:~$ sudo ipset create bad_ips hash:ip hashsize 16384 counterss\ngraf:~$ sudo ipset create good_ips hash:ip hashsize 4096\ngraf:~$ sudo iptables -A INPUT -m set --match-set good_ips src -j ACCEPT\ngraf:~$ sudo iptables -A INPUT -m set --match-set bad_ips src -j DROP\ngraf:~$ sudo iptables -A INPUT -m set --match-set bad_asns src -j DROP\ngraf:~$ sudo ipset add bad_asns 65.109.0.0/16",
"sig": "de2afb550b2bfc3f5fb89273aed554ddd7106653fbe3295f8a48579b8b3c328a4c7a2f4c138a93970e7088298b0424474c3e053f8c2a5818ce6c7ef36baddca3"
}