You might catch false positives from any "uptime" monitoring sites that you might have subscribed to, e.g. those listed here: https://www.hostingadvice.com/how-to/website-uptime-monitoring/
On 2/21/20 11:54 AM, Mike wrote: > > Seeing these things in my log postfix log file: > > Feb 21 10:43:47 d postfix/smtps/smtpd[18263]: warning: hostname > ip-113-92.4vendeta.com does not resolve to address 78.128.113.92 > Feb 21 10:43:47 x postfix/smtps/smtpd[18263]: connect from > unknown[78.128.113.92] > Feb 21 10:43:47 x postfix/smtps/smtpd[18263]: lost connection after > UNKNOWN from unknown[78.128.113.92] > Feb 21 10:43:47 x postfix/smtps/smtpd[18263]: disconnect from > unknown[78.128.113.92] > > Instances where something is connecting but not failing auth and instead > hanging up, but over and over again, wasting system resources. > > Does anybody have a jail to monitor and block this stuff? Or is it > ill-advised? Can this catch false positives? > > > > > _______________________________________________ > Fail2ban-users mailing list > Fail2ban-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/fail2ban-users -- -- <------ B-LUC Consulting ---- CISSP-ISSAP #41151 ----------> Thomas Bullinger, Owner Visit us @ http://consult.btoy1.net Phone: (585) 678-1552 Fax: (585) 598-3334 PGP key ID: 0xD40D9BB1 Badge: https://www.youracclaim.com/users/thomas-bullinger 57th rule of acquisition: Good customers are as rare as latinum. Treasure them. =============================================================== WARNING: Electronic mail sent through the Internet is not secure and could be intercepted by a third party. For your own protection, do not send any identifying information, including account, Social Security, card numbers, or passwords via email. ===============================================================
0x7CD6141AD40D9BB1.asc
Description: application/pgp-keys
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Fail2ban-users mailing list Fail2ban-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/fail2ban-users
