Attack de Immich par Tencent Cloud Computing (Beijing) Co., Ltd

Cela se fait via des requetes "GET /_app/immutable/chunks/*.js" sur Immich. Le serveur immich retour un 200 ... et les IP changent souvent. Je pense pas que Fail2Ban puisse voir ce type d'attaque.

J'ai donc bloqué dans une première étape :

IN REJECT -source 58.87.64.0/18 -p tcp -log notice # Tencent Cloud Computing (Beijing) Co. Ltd
IN REJECT -source 49.232.0.0/14 -p tcp -log notice # Tencent Cloud Computing (Beijing) Co. Ltd
IN REJECT -source 1.12.0.0/14 -p tcp -log notice # Tencent Cloud Computing (Beijing) Co. Ltd
IN REJECT -source 150.248.0.0/16 -p tcp -log notice # Tencent Cloud Computing (Beijing) Co. Ltd
IN REJECT -source 149.41.0.0/16 -p tcp -log notice # Tencent Cloud Computing (Beijing) Co. Ltd
IN REJECT -source 142.86.0.0/16 -p tcp -log notice # Tencent Cloud Computing (Beijing) Co. Ltd
IN REJECT -source 142.70.0.0/16 -p tcp -log notice # Tencent Cloud Computing (Beijing) Co. Ltd
IN REJECT -source 114.117.144.0/20 -p tcp -log notice # Tencent Cloud Computing (Beijing) Co. Ltd
IN REJECT -source 103.95.224.0/22 -p tcp -log notice # Tencent Cloud Computing (Beijing) Co. Ltd
IN REJECT -source 43.184.0.0/13 -p tcp -log notice # Tencent Cloud Computing (Beijing) Co. Ltd
IN REJECT -source 43.182.0.0/15 -p tcp -log notice # Tencent Cloud Computing (Beijing) Co. Ltd
IN REJECT -source 43.181.0.0/16 -p tcp -log notice # Tencent Cloud Computing (Beijing) Co. Ltd
IN REJECT -source 43.148.0.0/14 -p tcp -log notice # Tencent Cloud Computing (Beijing) Co. Ltd
IN REJECT -source 43.146.0.0/15 -p tcp -log notice # Tencent Cloud Computing (Beijing) Co. Ltd
IN REJECT -source 119.45.147.0/24 -p tcp -log notice # Attack Immich
IN REJECT -source 146.56.216.0/24 -p tcp -log notice # Attack Immich
IN REJECT -source 175.27.224.0/24 -p tcp -log notice # Attack Immich
IN REJECT -source 175.27.252.0/24 -p tcp -log notice # Attack Immich
IN REJECT -source 118.195.129.0/24 -p tcp -log notice # Attack Immich
IN REJECT -source 118.195.214.0/24 -p tcp -log notice # Attack Immich
IN REJECT -source 49.233.128.0/24 -p tcp -log notice # Attack Immich
IN REJECT -source 1.14.108.0/24 -p tcp -log notice # Attack Immich
IN REJECT -source 119.45.216.0/24 -p tcp -log notice # Attack Immich
IN REJECT -source 58.216.62.0/24 -p tcp -log notice # Attack Immich
IN REJECT -source 43.139.15.0/24 -p tcp -log notice # Attack Immich
IN REJECT -source 146.56.216.0/24 -p tcp -log notice # Attack Immich
IN REJECT -source 175.27.224.0/24 -p tcp -log notice # Attack Immich

A suivre.