--On Thursday, June 06, 2019 2:36 AM +0900 Steven Barthen via Fail2ban-users <fail2ban-users@lists.sourceforge.net> wrote:

I recently started reporting to  https://www.abuseipdb.com/

Nice site. I've manually reported there.

I noticed it's hosted on DigitalOcean, which turns out to be the source of most of my banned ssh probes once I lock out non-US addresses. I've got a separate blocked ipset of DigitalOcean netblocks determined empirically because they don't publish their netblocks. (Amazon publishes theirs, making it easy to block their customers from probing my systems.) I still get probes as they add new blocks.




_______________________________________________
Fail2ban-users mailing list
Fail2ban-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fail2ban-users

Reply via email to