I had a closer look at my iptables options and found TARPIT. Oooo... Unfortunately, I don't have the right kernel option installed. Drat. So I picked REJECT --reject-with icmp-host-unreachable. he he he he...
So they keep changing their source address. It's coming from somewhere in Russia. So now I'm filtering 91/8 and 89/8.
I wonder how long this will last...
Wade.