I recently started reporting to https://www.abuseipdb.com/
Once you are registered and verified, you get 5000 querys a day. For every report you send, you get a reponse with an "abuse score", you can create your own scrip that is filing a ban base on that "score" ie https://www.abuseipdb.com/check/5.196.70.107 Ie base time for abuse is 7 days ban at 100% confidence.... the lower the less... or whatever idea you come up with. I did my script based on https://www.abuseipdb.com/fail2ban.html and the script mention in here https://github.com/fail2ban/fail2ban/blob/0.11/config/action.d/abuseipdb.conf Tho the script is using the old APIv1 wich will not work for new users, so you have to come up with your own solution. Anyways, they also offer a blacklist fo you to download. Cheers Am Do., 6. Juni 2019 um 01:04 Uhr schrieb Jason L Tibbitts III < ti...@math.uh.edu>: > >>>>> "M" == Mike <t...@rohms.com> writes: > > M> It would be nice to have some kind of shared attack list we could > M> use, like DNSRBL. > > blocklist.de publishes several. fail2ban already has support for > reporting your bans to them; see the documentation in the default > jail.conf. You just need to get an API key from the blocklist.de site > to set things up. > > That is one nice feature that denyhosts has; any host running it can > communicate with a server and coordinate blocking with all other hosts > who do the same. Originally that server was proprietary but since the > API is public someone else ended up writing their own server. Sadly > denyhosts went somewhat moribund and I lost track of it. > > Technically there probably isn't much from stopping fail2ban from using > the same server software in some way if someone wanted to write the > code. Though I'm not sure if fail2ban has any way to pull a set of > addresses to block from an external source. > > - J< > > > _______________________________________________ > Fail2ban-users mailing list > Fail2ban-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/fail2ban-users >
_______________________________________________ Fail2ban-users mailing list Fail2ban-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/fail2ban-users
