うざいIPをまとめてDROP

firewall-cmd --permanent --zone=drop --add-source=94.156.6.0/24
success
firewall-cmd --reload
success
firewall-cmd --zone=drop --list-all
drop (active)
target: DROP
icmp-block-inversion: no
interfaces:
sources: 46.148.40.0/24 94.156.102.0/24 94.156.6.0/24
services:
ports:
protocols:
forward: yes
masquerade: no
forward-ports:
source-ports:
icmp-blocks:
rich rules:

firewall-cmd --zone=drop --remove-source=94.156.6.0/24 --permanent

firewall-cmd --add-source=46.148.40.0/24 --zone=drop --permanent
firewall-cmd --reload
firewall-cmd --remove-source=46.148.40.0/24 --zone=drop --permanent
firewall-cmd --reload