We have been having problems with excessive accesses for a while. I finally got fed up with it and setup firewalld. I'm now blocking a number of networks.
rich rules:
rule family="ipv4" source address="47.84.0.0/16" drop
rule family="ipv4" source address="47.79.0.0/16" drop
rule family="ipv4" source address="57.141.0.0/24" drop
rule family="ipv4" source address="47.77.0.0/16" drop
rule family="ipv4" source address="47.80.0.0/16" drop
rule family="ipv4" source address="47.81.0.0/16" drop
rule family="ipv4" source address="34.174.0.0/16" drop
rule family="ipv4" source address="47.74.0.0/16" drop
rule family="ipv4" source address="185.55.240.0/24" drop
rule family="ipv4" source address="47.86.0.0/16" drop
rule family="ipv4" source address="47.78.0.0/16" drop
rule family="ipv4" source address="179.49.0.0/16" reject
rule family="ipv4" source address="47.85.0.0/16" drop
rule family="ipv4" source address="216.73.216.0/24" log prefix="BOT BLOCK" drop
rule family="ipv4" source address="17.241.219.0/24" drop
rule family="ipv4" source address="203.162.0.0/24" drop
rule family="ipv4" source address="159.65.0.0/24" drop
rule family="ipv4" source address="45.228.0.0/16" reject
rule family="ipv4" source address="20.171.207.0/24" drop
rule family="ipv4" source address="47.75.0.0/16" drop
rule family="ipv4" source address="57.141.4.0/24" drop
rule family="ipv4" source address="47.76.0.0/16" drop
rule family="ipv4" source address="47.83.0.0/16" drop
rule family="ipv4" source address="47.87.0.0/16" drop
rule family="ipv4" source address="47.82.0.0/16" drop
rule family="ipv4" source address="57.141.6.0/24" drop
If I have to block more, I will.
But, should I convert to INNODB? Or will that not really help?
