faultiersp/block_minecraftbots

Banning known ip addresses of Minecraft bots from scanning your server. Uses Debian onboard tools.

apt install ipset ipset-persistent

ipset create blacklist hash:ip

iptables -I INPUT -m set --match-set blacklist src -j DROP
iptables -I FORWARD -m set --match-set blacklist src -j DROP

ipset restore -! < /path/to/the/list/you/got/from/here/ipset-blacklist

To add addresses yourself:

Modify ~/.bashrc:

alias banip='ipset add blacklist -exist'

Then:

source ~/.bashrc

Then for every IP:

banip <IP>

Save the list:

ipset save blacklist -f ipset-blacklist
sudo ipset restore -! < ipset-blacklist

Manuals: https://linux.die.net/man/8/ipset

https://confluence.jaytaala.com/display/TKB/Using+ipset+to+block+IP+addresses+-+firewall